CVE-2006-2279

2006-05-0923:00:00

mitre

www.cve.org

8.5 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.0%

JSON

Multiple SQL injection vulnerabilities in SaphpLesson 3.0 allow remote attackers to execute arbitrary SQL commands via (1) the Find parameter in (a) search.php, and the (2) LID and (3) Rate parameters in (b) misc.php.

References

secunia.com/advisories/20034

securityreason.com/securityalert/862

www.osvdb.org/25362

www.osvdb.org/25363

www.securityfocus.com/archive/1/433052/100/0/threaded

www.securityfocus.com/bid/17848

www.vupen.com/english/advisories/2006/1708

exchange.xforce.ibmcloud.com/vulnerabilities/26293