NVD

Id
61433  
Name
CVE-2006-2748  
Description
SQL injection vulnerability in the do_mysql_query function in core.php for Open Searchable Image Catalogue (OSIC) before 0.7.0.1 allows remote attackers to inject arbitrary SQL commands via multiple vectors, as demonstrated by the (1) type parameter in adminfunctions.php and the (2) catalogue_id parameter in editcatalogue.php.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-06-01  
Modified Date
2008-09-05  
Seq
2006-2748  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
317448 61433 CVE-2006-2748 1014  View
317449 61433 CVE-2006-2748 1016178  View
317450 61433 CVE-2006-2748 http://sourceforge.net/forum/forum.php?forum_id=576483  View
317451 61433 CVE-2006-2748 http://svn.sourceforge.net/viewcvs.cgi/osic-win/branches/osic_0-7/osic/core.php?r1=477&r2=631  View
317452 61433 CVE-2006-2748 http://www.seclab.tuwien.ac.at/advisories/TUVSA-0605-001.txt  View
317453 61433 CVE-2006-2748 20060530 Open Searchable Image Catalogue: XSS and SQL Injection Vulnerabilities  View
317454 61433 CVE-2006-2748 18169  View
317455 61433 CVE-2006-2748 osic-adminfunctions-editcatalogue-sql-inj(26968)  View

Related JVN