PT-2006-1246 · Myphpim · Myphpim

Aliaksandr Hartsuyeu · Publicado 2006-01-11 · Atualizado 2018-10-19 · CVE-2006-0167

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MyPhPim version 01.05

Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the cal id parameter in "calendar.php3" and the password field on the login page.

Recommendations For MyPhPim version 01.05, consider restricting access to the calendar.php3 page and the login page to minimize the risk of exploitation. As a temporary workaround, avoid using the cal id parameter in calendar.php3 and the password field on the login page until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2006-0167

Produtos afetados

Myphpim

Referências · 12

• 🔥 http://evuln.com/vulns/22/summary.html · Exploit
• 🔥 http://securityfocus.com/bid/16210 · Exploit
• 🔥 https://exploit-db.com/exploits/27067 · Exploit
• 🔥 https://exploit-db.com/exploits/27068 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-0167 · Nota de Segurança
• http://osvdb.org/22324 · Nota
• http://vupen.com/english/advisories/2006/0147 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24066 · Nota
• http://secunia.com/advisories/18399 · Aviso do Fabricante
• http://osvdb.org/22325 · Nota
• http://securityfocus.com/archive/1/421863/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24075 · Nota