NVD

Id
62713  
Name
CVE-2006-4056  
Description
Multiple SQL injection vulnerabilities in the authentication process in katzlbt (a) The Address Book 1.04e and earlier and (b) The Address Book Reloaded before 2.0-rc4 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters. NOTE: portions of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-08-09  
Modified Date
2011-03-07  
Seq
2006-4056  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
325960 62713 CVE-2006-4056 http://sourceforge.net/project/shownotes.php?release_id=437760&group_id=172286  View
325961 62713 CVE-2006-4056 19378  View
325962 62713 CVE-2006-4056 19380  View
325963 62713 CVE-2006-4056 ADV-2006-3174  View
325964 62713 CVE-2006-4056 ADV-2006-3176  View
325965 62713 CVE-2006-4056 theaddressbook-login-sql-injection(28258)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60737 JVNDB-2006-003003 katzlbt Address Book などの認証プロセスにおける SQL インジェクションの脆弱性 katzlbt (a) Address Book および (b) Address Book Reloaded の認証プロセスには、SQL インジェクションの脆弱性が存在します。 CVE-2006-4056 20158 CVE-2006-4056 62713 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003003.html 2006-08-09 2012-12-20 View