NVD

Id
64415  
Name
CVE-2006-5840  
Description
** DISPUTED ** Multiple SQL injection vulnerabilities in Abarcar Realty Portal allow remote attackers to execute arbitrary SQL commands via the (1) neid parameter to newsdetails.php, or the (2) slid parameter to slistl.php. NOTE: the cat vector is already covered by CVE-2006-2853. NOTE: the vendor has notified CVE that the current version only creates static pages, and that slistl.php/slid never existed in any version.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-11-09  
Modified Date
2011-09-08  
Seq
2006-5840  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
336179 64415 CVE-2006-5840 20061219 abarcar vendor statement on CVE-2006-5840  View
336180 64415 CVE-2006-5840 http://s-a-p.ca/index.php?page=OurAdvisories&id=7  View
336181 64415 CVE-2006-5840 1840  View
336182 64415 CVE-2006-5840 20061207 Vendor dispute - CVE-2006-5840 (abarcar Realty Portal)  View
336183 64415 CVE-2006-5840 20061108 Abarcar Realty Portal [injection sql]  View
336184 64415 CVE-2006-5840 20970  View
336185 64415 CVE-2006-5840 ADV-2006-4418  View
336186 64415 CVE-2006-5840 abarcar-realty-newsdetails-sql-injection(30135)  View

Related JVN