CVE-2006-6478 Multiple SQL injection vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in (a) email.php, the (2) no parameter in (b) voirannonc...
HighCVSS 7.5
EPSS 10.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple SQL injection vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in (a) email.php, the (2) no parameter in (b) voirannonce.php, the (3) idmembre parameter in (c) admin/admin_membre/fiche_membre.php, and the (4) idannonce parameter in (d) admin/admin_annonce/okvalannonce.php and (e) admin/admin_annonce/changeannonce.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| scriptphp annoncescripthp | = 2.0 | No fix listed |
References
- 23318 third-party-advisory
- 2019 third-party-advisory
- 20061209 AnnonceScriptHP V2.0 Multiple Vulnerabilities mailing-list
- 21514 vdb-entry vendor-advisory
- ADV-2006-4940 vdb-entry
- annoncescripthp-multiple-sql-injection(30803) vdb-entry