CVE-2006-4606

Longino Jacome Php-revista - SQL Injection

Title source: rule
STIX 2.1

Description

Multiple SQL injection vulnerabilities in Longino Jacome php-Revista 1.1.2 allow remote attackers to execute arbitrary SQL commands via the (1) id_temas parameter in busqueda_tema.php, the (2) cadena parameter in busqueda.php, the (3) id_autor parameter in autor.php, the (4) email parameter in lista.php, and the (5) id_articulo parameter in articulo.php.

Exploits (2)

exploitdb WRITEUP VERIFIED
by SirDarckCat · textwebappsphp
https://www.exploit-db.com/exploits/8425
exploitdb WORKING POC VERIFIED
by Cold Zero · textwebappsphp
https://www.exploit-db.com/exploits/3538

References (15)

Core 15
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/19818
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/8425
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/3538
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/28452
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/28446
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/28447
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/502637/100/0/threaded
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/1499
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/28445
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/445007/100/0/threaded
Third Party Advisory mailing-list x_refsource_vim
http://www.attrition.org/pipermail/vim/2009-April/002167.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/28448
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21738
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/28451
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/23079

Scores

EPSS 0.0943
EPSS Percentile 92.8%

Details

Status published
Products (1)
longino/jacome_php-revista 1.1.2
Published Sep 07, 2006
Tracked Since Feb 18, 2026