CVE-2006-0729 SQL injection vulnerability in functions.php in Teca Diary PE 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) yy, (2) mm, and (3) dd parameters.
HighCVSS 7.5
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in functions.php in Teca Diary PE 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) yy, (2) mm, and (3) dd parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| teca scripts teca diary | = personal_1.0 | No fix listed |
References
- 18876 third-party-advisory
- 477 third-party-advisory
- 1015674 vdb-entry
- www.evuln.com vendor-advisory
- 20060223 [eVuln] Teca Diary PE SQL Injection Vulnerability mailing-list
- 16686 vdb-entry
- ADV-2006-0615 vdb-entry
- tecadiary-functions-sql-injection(24643) vdb-entry