NVD

Id
63218  
Name
CVE-2006-4585  
Description
SQL injection vulnerability in admin/editer.php in Tr Forum 2.0 allows remote authenticated users to execute arbitrary SQL commands via the id2 parameter. NOTE: this can be leveraged with other Tr Forum vulnerabilities to allow unauthenticated attackers to gain privileges.  
Reject
 
CVSS Version
2  
CVSS Score
9  
Severity
High  
CVSS Base Score
9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-09-06  
Modified Date
2011-03-07  
Seq
2006-4585  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
329389 63218 CVE-2006-4585 http://acid-root.new.fr/poc/10060903.txt  View
329390 63218 CVE-2006-4585 2297  View
329391 63218 CVE-2006-4585 1508  View
329392 63218 CVE-2006-4585 1016788  View
329393 63218 CVE-2006-4585 20060903 Tr Forum V2.0 Multiple Vulnerabilities  View
329394 63218 CVE-2006-4585 19834  View
329395 63218 CVE-2006-4585 ADV-2006-3452  View
329396 63218 CVE-2006-4585 tr-forum-admin-sql-injection(28753)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60847 JVNDB-2006-003113 Tr Forum の admin/editer.php における SQL インジェクションの脆弱性 Tr Forum の admin/editer.php には、SQL インジェクションの脆弱性が存在します。 CVE-2006-4585 20687 CVE-2006-4585 63218 9 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003113.html 2006-09-06 2012-12-20 View