CVE-2006-2826

Опубликовано: 05 июн. 2006

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

SQL injection vulnerability in sessions.inc in PHP Base Library (PHPLib) before 7.4a allows remote attackers to execute arbitrary SQL commands via the id variable, which is set by a client through a query string or a cookie.

Ссылки

http://secunia.com/advisories/16902
Patch
Vendor Advisory
http://securitytracker.com/id?1016123
Patch
http://sourceforge.net/project/shownotes.php?group_id=31885&release_id=396091
Patch
http://www.gulftech.org/?node=research&article_id=00107-03052006
Vendor Advisory
http://www.osvdb.org/23466
Patch
http://www.securityfocus.com/bid/16801
Patch
http://www.vupen.com/english/advisories/2006/0720
https://exchange.xforce.ibmcloud.com/vulnerabilities/24873
http://secunia.com/advisories/16902
Patch
Vendor Advisory
http://securitytracker.com/id?1016123
Patch
http://sourceforge.net/project/shownotes.php?group_id=31885&release_id=396091
Patch
http://www.gulftech.org/?node=research&article_id=00107-03052006
Vendor Advisory
http://www.osvdb.org/23466
Patch
http://www.securityfocus.com/bid/16801
Patch
http://www.vupen.com/english/advisories/2006/0720
https://exchange.xforce.ibmcloud.com/vulnerabilities/24873

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:phplib_team:phplib:7.4:*:*:*:*:*:*:*

cpe:2.3:a:phplib_team:phplib:7.4_pre2:*:*:*:*:*:*:*

EPSS

Процентиль: 81%

0.01597

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-75m6-xm9v-mmmm

github

почти 4 года назад