Back to feed
EUVD-2006-0946 · Published Mar 1, 2006
SQL injection vulnerability in the sondages module in index.php in PwsPHP 1.2.3 allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.
Technologies
Pwsphp Pwsphp
Weaknesses
NVD-CWE-Other
CVSS scores
- v2.07.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
- http://securityreason.com/securityalert/496
- http://securitytracker.com/id?1015684
- http://www.pwsphp.com/index.php?mod=news&ac=commentaires&id=278
- http://www.securityfocus.com/archive/1/426084/100/0/threaded
- http://www.securityfocus.com/archive/1/426183/100/0/threaded
- http://www.vupen.com/english/advisories/2006/0748
Potentially impacted assets
See if this affects your attack surface
