NVD

Id
62545  
Name
CVE-2006-3884  
Description
Multiple SQL injection vulnerabilities in links.php in Gonafish LinksCaffe 3.0 allow remote attackers to execute arbitrary SQL commands via the (1) offset and (2) limit parameters, (3) newdays parameter in a new action, and the (4) link_id parameter in a deadlink action. NOTE: this issue can also be used for path disclosure by a forced SQL error, or to modify PHP files using OUTFILE.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-07-26  
Modified Date
2011-03-07  
Seq
2006-3884  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
324998 62545 CVE-2006-3884 1287  View
324999 62545 CVE-2006-3884 1016584  View
325000 62545 CVE-2006-3884 20060725 LinksCaffe 3.0 SQL injection/Command Execution Vulnerabilties  View
325001 62545 CVE-2006-3884 19149  View
325002 62545 CVE-2006-3884 ADV-2006-2983  View
325003 62545 CVE-2006-3884 linkscaffe-links-sql-injection(27961)  View
325004 62545 CVE-2006-3884 linkscaffe-links-path-disclosure(27962)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60656 JVNDB-2006-002922 Gonafish LinksCaffe の links.php における SQL インジェクションの脆弱性 Gonafish LinksCaffe の links.php には、SQL インジェクションの脆弱性が存在します。 CVE-2006-3884 19986 CVE-2006-3884 62545 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002922.html 2006-07-26 2012-12-20 View