NVD

Id
62772  
Name
CVE-2006-4118  
Description
Multiple SQL injection vulnerabilities in GeheimChaos 0.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) Temp_entered_login or (2) Temp_entered_email parameters to (a) gc.php, and in multiple parameters in (b) include/registrieren.php, possibly involving the (3) $form_email, (4) $form_vorname, (5) $form_nachname, (6) $form_strasse, (7) $form_plzort, (8) $form_land, (9) $form_homepage, (10) $form_bildpfad, (11) $form_profilsichtbar, (12) $Temp_sprache, (13) $form_tag, (14) $form_monat, (15) $form_jahr, (16) $Temp_akt_string, (17) $form_icq, (18) $form_msn, (19) $form_yahoo, (20) $form_username, and (21) $Temp_form_pass variables.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-08-14  
Modified Date
2016-10-17  
Seq
2006-4118  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
326302 62772 CVE-2006-4118 20060803 GeheimChaos <= 0.5 Multiple SQL Injection  View
326303 62772 CVE-2006-4118 1376  View
326304 62772 CVE-2006-4118 20060803 GeheimChaos <= 0.5 Multiple SQL Injection Vulnerabilities  View
326305 62772 CVE-2006-4118 19342  View
326306 62772 CVE-2006-4118 ADV-2006-3154  View
326307 62772 CVE-2006-4118 geheimchaos-gc-registieren-sql-injection(28221)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58816 JVNDB-2006-001082 GeheimChaos における SQL インジェクションの脆弱性 GeheimChaos には、SQL インジェクションの脆弱性が存在します。 CVE-2006-4118 20220 CVE-2006-4118 62772 5.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001082.html 2006-08-14 2012-06-26 View