CVE

Id
23016  
CVE No.
CVE-2006-6912  
Status
Candidate  
Description
SQL injection vulnerability in phpMyFAQ 1.6.7 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly the userfile or filename parameter.  
Phase
Assigned (20070109)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
222254 23016 CVE-2006-6912 CONFIRM:http://www.phpmyfaq.de/advisory_2006-12-15.php  View
222255 23016 CVE-2006-6912 BID:21944  View
222256 23016 CVE-2006-6912 URL:http://www.securityfocus.com/bid/21944  View
222257 23016 CVE-2006-6912 VUPEN:ADV-2007-0077  View
222258 23016 CVE-2006-6912 URL:http://www.vupen.com/english/advisories/2007/0077  View
222259 23016 CVE-2006-6912 SECUNIA:23651  View
222260 23016 CVE-2006-6912 URL:http://secunia.com/advisories/23651  View
222261 23016 CVE-2006-6912 XF:phpmyfaq-attachment-sql-injection(32802)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51347 JVNDB-2007-000009 IBM AIX の ftpd におけるパスワード開示の脆弱性 IBM AIX の ftpd には、ローカルユーザにユーザのパスワード情報を開示してしまう脆弱性が存在します。 CVE-2006-6914 23016 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000009.html  View