CVE

Id
23049  
CVE No.
CVE-2006-6945  
Status
Candidate  
Description
SQL injection vulnerability in Virtuemart 1.0.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, probably related to (1) Itemid, (2) product_id, and category_id parameters as handled in virtuemart_parser.php.  
Phase
Assigned (20070119)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
222557 23049 CVE-2006-6945 BUGTRAQ:20070204 Sql injection bugs in Virtuemart and Letterman  View
222558 23049 CVE-2006-6945 URL:http://www.securityfocus.com/archive/1/archive/1/459195/100/0/threaded  View
222559 23049 CVE-2006-6945 FULLDISC:20070118 The vulnerabilities festival !  View
222560 23049 CVE-2006-6945 URL:http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.html  View
222561 23049 CVE-2006-6945 MISC:http://www.hackers.ir/advisories/festival.txt  View
222562 23049 CVE-2006-6945 CONFIRM:http://virtuemart.svn.sourceforge.net/viewvc/*checkout*/virtuemart/branches/virtuemart-1_0_0/virtuemart/CHANGELOG.php?revision=607  View
222563 23049 CVE-2006-6945 BID:22123  View
222564 23049 CVE-2006-6945 URL:http://www.securityfocus.com/bid/22123  View
222565 23049 CVE-2006-6945 SECUNIA:24058  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58541 JVNDB-2006-000737 NEC MultiWriter 1700C/7500C の FTP サーバにおける脆弱性 NEC 製プリンタには、内蔵の FTP サーバを経由して他の FTP サーバに接続できるという脆弱性が発見されました。プリンタ内蔵の FTP サーバ機能は、ターゲットサーバへの接続はできますが、ファイル等を送りつけることはできません。 CVE-2006-6947 23049 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000737.html  View