CVE-2006-7025

Bookmark4U < 2.1 - SQL Injection via admin/config.php sqlcmd Parameter

Title source: llm
STIX 2.1

Description

SQL injection vulnerability in admin/config.php in Bookmark4U 2.0 and 2.1 allows remote attackers to inject arbitrary SQL command via the sqlcmd parameter.

References (6)

Core 6
Core References
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/1456
Broken Link vdb-entry x_refsource_osvdb
http://www.osvdb.org/24795
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/25956
Permissions Required third-party-advisory x_refsource_secunia
http://secunia.com/advisories/19758
Third Party Advisory mailing-list x_refsource_fulldisc
http://marc.info/?l=full-disclosure&m=114555163911635&w=2

Scores

EPSS 0.0133
EPSS Percentile 68.3%

Details

CWE
CWE-89
Status published
Products (1)
sangwan_kim/bookmark4u < 2.1
Published Feb 23, 2007
Tracked Since Feb 18, 2026