NVD

Id
63409  
Name
CVE-2006-4785  
Description
SQL injection vulnerability in blog/edit.php in Moodle 1.6.1 and earlier allows remote attackers to execute arbitrary SQL commands via the format parameter as stored in the $blogEntry variable, which is not properly handled by the insert_record function, which calls _adodb_column_sql in the adodb layer (lib/adodb/adodb-lib.inc.php), which does not convert the data type to an int.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-09-14  
Modified Date
2011-08-05  
Seq
2006-4785  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
330416 63409 CVE-2006-4785 http://docs.moodle.org/en/Release_notes#Moodle_1.6.2  View
330417 63409 CVE-2006-4785 1016877  View
330418 63409 CVE-2006-4785 20060919 Moodle issue - invalid vendor ack? and extra vulns  View
330419 63409 CVE-2006-4785 20060619 Re: Moodle issue - invalid vendor ack? and extra vulns  View
330420 63409 CVE-2006-4785 20060917 Sql injection in Moodle  View
330421 63409 CVE-2006-4785 19995  View
330422 63409 CVE-2006-4785 20085  View
330423 63409 CVE-2006-4785 ADV-2006-3591  View
330424 63409 CVE-2006-4785 moodle-edit-sql-injection(29001)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
59841 JVNDB-2006-002107 Moodle の blog/edit.php における SQL インジェクションの脆弱性 Moodle の blog/edit.php には、SQL インジェクションの脆弱性が存在します。 CVE-2006-4785 20887 CVE-2006-4785 63409 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002107.html 2006-09-12 2012-09-25 View