CVE

Id
23276  
CVE No.
CVE-2006-7172  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in php-stats.recphp.php in PHP-Stats 0.1.9.1b and earlier allow remote attackers to execute arbitrary code via a leading dotted-quad IP address string in the (1) PC-REMOTE-ADDR HTTP header, which is inserted into $_SERVER["HTTP_PC_REMOTE_ADDR"], or (2) ip parameter.  
Phase
Assigned (20070320)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
224016 23276 CVE-2006-7172 MILW0RM:3496  View
224017 23276 CVE-2006-7172 URL:http://milw0rm.com/exploits/3496  View
224018 23276 CVE-2006-7172 MILW0RM:3497  View
224019 23276 CVE-2006-7172 URL:http://milw0rm.com/exploits/3497  View
224020 23276 CVE-2006-7172 VUPEN:ADV-2007-1004  View
224021 23276 CVE-2006-7172 URL:http://www.vupen.com/english/advisories/2007/1004  View
224022 23276 CVE-2006-7172 OSVDB:34280  View
224023 23276 CVE-2006-7172 URL:http://osvdb.org/34280  View
224024 23276 CVE-2006-7172 SECUNIA:24553  View
224025 23276 CVE-2006-7172 URL:http://secunia.com/advisories/24553  View
224026 23276 CVE-2006-7172 XF:phpstats-phpstatsrecphp-sql-injection(33031)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56201 JVNDB-2007-004893 phpBB の Dimension モジュールにおける PHP リモートファイルインクルージョンの脆弱性 phpBB の Dimension モジュールの includes/functions.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-7174 23276 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004893.html  View