NVD

Id
64829  
Name
CVE-2006-6268  
Description
SQL injection vulnerability in system/core/profile/profile.inc.php in Neocrome Land Down Under (LDU) 8.x and earlier allows remote authenticated users to execute arbitrary SQL commands via a url-encoded id parameter to users.php that begins with a valid filename, as demonstrated by "default.gif" followed by a double-encoded NULL and " (apostrophe) (%2500%2527).  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-12-04  
Modified Date
2008-09-05  
Seq
2006-6268  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
338522 64829 CVE-2006-6268 1954  View
338523 64829 CVE-2006-6268 http://www.nukedx.com/?viewdoc=51  View
338524 64829 CVE-2006-6268 20061122 Advisory: LDU <= 8.x Remote SQL Injection Vulnerability.  View
338525 64829 CVE-2006-6268 21227  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60223 JVNDB-2006-002489 Neocrome LDU の system/core/profile/profile.inc.php における SQL インジェクションの脆弱性 Neocrome Land Down Under (LDU) の system/core/profile/profile.inc.php には、SQL インジェクションの脆弱性が存在します。 CVE-2006-6268 22370 CVE-2006-6268 64829 10 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002489.html 2006-12-04 2012-09-25 View