NVD

Id
59182  
Name
CVE-2006-0444  
Description
SQL injection vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.1 allows remote attackers to execute arbitrary SQL commands via the (1) par parameter in the post function on the forum page and possibly the (2) poll_id parameter on the poll page. NOTE: the poll_id vector can also allow resultant cross-site scripting (XSS) from an unquoted error message for invalid SQL syntax.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-01-26  
Modified Date
2011-03-07  
Seq
2006-0444  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
304208 59182 CVE-2006-0444 http://www.h4cky0u.org/advisories/HYSA-2006-002-phpclan.txt  View
304209 59182 CVE-2006-0444 20060125 HYSA-2006-002 Phpclanwebsite 1.23.1 Multiple Vulnerabilities  View
304210 59182 CVE-2006-0444 16391  View
304211 59182 CVE-2006-0444 ADV-2006-0342  View
304212 59182 CVE-2006-0444 phpclanwebsite-index-sql-injection(24355)  View

Related JVN