NVD

Id
60770  
Name
CVE-2006-2065  
Description
SQL injection vulnerability in save.php in PHPSurveyor 0.995 and earlier allows remote attackers to execute arbitrary SQL commands via the surveyid cookie. NOTE: this issue could be leveraged to execute arbitrary PHP code, as demonstrated by inserting directory traversal sequences into the database, which are then processed by the thissurvey["language"] variable.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-04-27  
Modified Date
2016-11-18  
Seq
2006-2065  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
313770 60770 CVE-2006-2065 http://retrogod.altervista.org/phpsurveyor_0995_xpl.html  View
313771 60770 CVE-2006-2065 1015970  View
313772 60770 CVE-2006-2065 20060420 PHPSurveyor <= 0.995 "save.php/surveyid" remote cmmnds xctn  View
313773 60770 CVE-2006-2065 17633  View
313774 60770 CVE-2006-2065 ADV-2006-1451  View
313775 60770 CVE-2006-2065 phpsurveyor-surveyid-shell-execution(25970)  View

Related JVN