CVE

Id
22265  
CVE No.
CVE-2006-6161  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in Doug Luxem Liberum Help Desk 0.97.3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) uid parameter to (a) inout/status.asp, (b) inout/update.asp, and (c) forgotpass.asp. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.  
Phase
Assigned (20061128)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
215126 22265 CVE-2006-6161 MILW0RM:7493  View
215127 22265 CVE-2006-6161 URL:http://www.milw0rm.com/exploits/7493  View
215128 22265 CVE-2006-6161 BID:32884  View
215129 22265 CVE-2006-6161 URL:http://www.securityfocus.com/bid/32884  View
215130 22265 CVE-2006-6161 VUPEN:ADV-2006-4704  View
215131 22265 CVE-2006-6161 URL:http://www.vupen.com/english/advisories/2006/4704  View
215132 22265 CVE-2006-6161 XF:liberumhelpdesk-forgotpass-sql-injection(47420)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61242 JVNDB-2006-003508 TikiWiki の tiki-setup_base.php におけるクロスサイトスクリプティングの脆弱性 TikiWiki の tiki-setup_base.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-6163 22265 4.3 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003508.html  View