CVE-2006-0066

PHPjournaler 1.0 - SQL Injection

Title source: llm
STIX 2.1

Description

SQL injection vulnerability in index.php in PHPjournaler 1.0 allows remote attackers to execute arbitrary SQL commands via the readold parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Aliaksandr Hartsuyeu · textwebappsphp
https://www.exploit-db.com/exploits/27004

References (6)

Core 6
Core References
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/16111
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/0006
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/420666/100/0/threaded
Exploit vdb-entry x_refsource_osvdb
http://www.osvdb.org/22149
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18265
Vendor Advisory x_refsource_misc
http://evuln.com/vulns/9/summary.html

Scores

EPSS 0.0103
EPSS Percentile 77.4%

Details

Status published
Products (1)
phpjournaler/phpjournaler 1.0
Published Jan 03, 2006
Tracked Since Feb 18, 2026