NVD

Id
59826  
Name
CVE-2006-1104  
Description
Multiple SQL injection vulnerabilities in Pixelpost 1.5 beta 1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the showimage parameter in index.php; and the (2) USER_AGENT, (3) HTTP_REFERER, and (4) HTTP_HOST HTTP header fields as used in the book_vistor function in includes/functions.php. NOTE: the vendor has disputed some issues from the original disclosure, but due to the vagueness of the dispute, it is not clear whether the vendor is disputing this particular issue.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-03-09  
Modified Date
2011-03-07  
Seq
2006-1104  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
307752 59826 CVE-2006-1104 http://forum.pixelpost.org/showthread.php?t=3535  View
307753 59826 CVE-2006-1104 http://www.neosecurityteam.net/index.php?action=advisories&id=19  View
307754 59826 CVE-2006-1104 20060304 Pixel Post Multiple Vulnerabilities  View
307755 59826 CVE-2006-1104 16964  View
307756 59826 CVE-2006-1104 ADV-2006-0823  View
307757 59826 CVE-2006-1104 pixelpost-index-sql-injection(25044)  View
307758 59826 CVE-2006-1104 pixelpost-functions-sql-injection(25046)  View

Related JVN