CVE-2006-0146 The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PHPOpenChat, (7) MAXdev MD-Pro, and (8)...
HighCVSS 7.5
EPSS 13.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PHPOpenChat, (7) MAXdev MD-Pro, and (8) MediaBeez, when the MySQL root password is empty, allows remote attackers to execute arbitrary SQL commands via the sql parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| john lim adodb | = 4.66 | No fix listed |
| john lim adodb | = 4.68 | No fix listed |
| mantis | = 0.19.4 | No fix listed |
| mantis | = 1.0.0_rc4 | No fix listed |
| mediabeez | All versions | No fix listed |
| moodle/moodle | = 1.5.3 | No fix listed |
| postnuke software foundation postnuke | = 0.761 | No fix listed |
| the cacti group cacti | = 0.8.6g | No fix listed |
| debian/cacti(Debian:12) | < 0.8.6d-1 | 0.8.6d-1 |
| debian/cacti(Debian:13) | < 0.8.6d-1 | 0.8.6d-1 |
| debian/cacti(Debian:14) | < 0.8.6d-1 | 0.8.6d-1 |
| debian/libphp-adodb(Debian:12) | < 4.72-0.1 | 4.72-0.1 |
| debian/libphp-adodb(Debian:13) | < 4.72-0.1 | 4.72-0.1 |
| debian/libphp-adodb(Debian:14) | < 4.72-0.1 | 4.72-0.1 |
References
- Debian Security Tracker CVE-2006-0146 vendor-advisory
- bugs.debian.org issue-tracking
- retrogod.altervista.org exploit
- 17418 exploit patch third-party-advisory vendor-advisory
- 18233 patch third-party-advisory vendor-advisory
- 18254 third-party-advisory vendor-advisory
- 18260 patch third-party-advisory vendor-advisory
- 18267 third-party-advisory vendor-advisory
- 18276 patch third-party-advisory vendor-advisory
- 18720 patch third-party-advisory vendor-advisory
- 19555 patch third-party-advisory vendor-advisory
- 19563 patch third-party-advisory vendor-advisory
- 19590 patch third-party-advisory vendor-advisory
- 19591 patch third-party-advisory vendor-advisory
- 19600 third-party-advisory vendor-advisory
- 19691 third-party-advisory vendor-advisory
- 19699 patch third-party-advisory vendor-advisory
- 24954 third-party-advisory vendor-advisory
- secunia.com exploit patch vendor-advisory
- 713 third-party-advisory
- DSA-1029 patch vendor-advisory
- DSA-1030 patch vendor-advisory
- DSA-1031 patch vendor-advisory
- GLSA-200604-07 patch vendor-advisory
- www.maxdev.com url-repurposed
- 22290 exploit patch vdb-entry
- 20060202 Bug for libs in php link directory 2.0 mailing-list
- 20060409 PhpOpenChat 3.0.x ADODB Server.php "sql" SQL injection mailing-list
- 20070418 MediaBeez Sql query Execution .. Wear isn't ?? :) mailing-list
- 16187 exploit patch vdb-entry
- ADV-2006-0101 vdb-entry vendor-advisory
- ADV-2006-0102 vdb-entry
- ADV-2006-0103 vdb-entry vendor-advisory
- ADV-2006-0104 vdb-entry vendor-advisory
- ADV-2006-0105 vdb-entry vendor-advisory
- ADV-2006-0370 vdb-entry vendor-advisory
- ADV-2006-0447 vdb-entry vendor-advisory
- ADV-2006-1304 vdb-entry vendor-advisory
- ADV-2006-1305 vdb-entry vendor-advisory
- ADV-2006-1419 vdb-entry
- www.xaraya.com patch
- adodb-server-command-execution(24051) vdb-entry