CVE-2006-3926

Php Pro Bid - SQL Injection

Title source: rule

Description

Multiple SQL injection vulnerabilities in PhpProBid 5.24 allow remote attackers to execute arbitrary SQL commands via the (1) view or (2) start parameters to (a) viewfeedback.php or the (3) orderType parameter to (b) categories.php.

Exploits (2)

exploitdb WRITEUP VERIFIED

by EllipSiS Security · textwebappsphp

https://www.exploit-db.com/exploits/28275

View Code ZIP pw:eip

exploitdb WRITEUP VERIFIED

by EllipSiS Security · textwebappsphp

https://www.exploit-db.com/exploits/28276

View Code ZIP pw:eip

References (8)

Core 8

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/28032

Exploit vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1016595

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/27546

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/27545

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/21201

Exploit vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/19158

Exploit mailing-list x_refsource_bugtraq

http://archives.neohapsis.com/archives/bugtraq/2006-07/0474.html

Third Party Advisory third-party-advisory x_refsource_sreason

http://securityreason.com/securityalert/1298

Scores

EPSS 0.0132

EPSS Percentile 80.0%

Details

Status published

Products (1)

php_pro_bid/php_pro_bid 5.24

Published Jul 31, 2006

Tracked Since Feb 18, 2026