NVD

Id
63453  
Name
CVE-2006-4836  
Description
SQL injection vulnerability in login.php in DCP-Portal SE 6.0 allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: The lostpassword.php and calendar.php vectors are already covered by CVE-2005-3365, and the search.php vector is already covered by CVE-2005-4227.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-09-15  
Modified Date
2008-09-05  
Seq
2006-4836  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
330743 63453 CVE-2006-4836 1585  View
330744 63453 CVE-2006-4836 20060914 DCP-Portal SE 6.0 multiple injections  View
330745 63453 CVE-2006-4836 20024  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58997 JVNDB-2006-001263 DCP-Portal SE の login.php における SQL インジェクションの脆弱性 DCP-Portal SE の login.php には、SQL インジェクションの脆弱性が存在します。 CVE-2006-4836 20938 CVE-2006-4836 63453 5.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001263.html 2006-09-15 2012-06-26 View