CVE

Id
23028  
CVE No.
CVE-2006-6924  
Status
Candidate  
Description
bitweaver 1.3.1 and earlier allows remote attackers to obtain sensitive information via a sort_mode=-98 query string to (1) blogs/list_blogs.php, (2) fisheye/index.php, (3) wiki/orphan_pages.php, or (4) wiki/list_pages.php, which forces a SQL error. NOTE: the fisheye/list_galleries.php vector is already covered by CVE-2005-4380.  
Phase
Assigned (20070112)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
222361 23028 CVE-2006-6924 BUGTRAQ:20061106 bitweaver <=1.3.1 [injection sql (post) & xss (post)]  View
222362 23028 CVE-2006-6924 URL:http://archives.neohapsis.com/archives/bugtraq/2006-11/0142.html  View
222363 23028 CVE-2006-6924 BID:20996  View
222364 23028 CVE-2006-6924 URL:http://www.securityfocus.com/bid/20996  View
222365 23028 CVE-2006-6924 VUPEN:ADV-2006-4485  View
222366 23028 CVE-2006-6924 URL:http://www.vupen.com/english/advisories/2006/4485  View
222367 23028 CVE-2006-6924 SECUNIA:22793  View
222368 23028 CVE-2006-6924 URL:http://secunia.com/advisories/22793  View
222369 23028 CVE-2006-6924 SREASON:2144  View
222370 23028 CVE-2006-6924 URL:http://securityreason.com/securityalert/2144  View
222371 23028 CVE-2006-6924 XF:bitweaver-sortmode-sql-injection(30165)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52542 JVNDB-2007-001234 eXtremail におけるバッファオーバーフローの脆弱性 eXtremail には、バッファオーバーフローの脆弱性が存在します。 CVE-2006-6926 23028 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001234.html  View