CVE-2006-4039 Multiple SQL injection vulnerabilities in eintragen.php in GaesteChaos 0.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) gastname, (2) gastwohnort, or (3) gasteintra...
HighCVSS 7.5
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in eintragen.php in GaesteChaos 0.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) gastname, (2) gastwohnort, or (3) gasteintrag parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| chaossoft gaestechaos | <= 0.2 | No fix listed |
References
- 20060803 GaesteChaos <= 0.2 Multiple Vulnerabilities exploit mailing-list
- 21357 permissions-required third-party-advisory
- 20060803 GaesteChaos <= 0.2 Multiple Vulnerabilities mailing-list
- 19343 third-party-advisory vdb-entry
- ADV-2006-3155 not-applicable vdb-entry
- gastechaos-eintragen-sql-injection(28218) vdb-entry