PT-2006-1246 · Myphpim · Myphpim

Aliaksandr Hartsuyeu · Published 2006-01-11 · Updated 2018-10-19 · CVE-2006-0167

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MyPhPim version 01.05

Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the cal id parameter in "calendar.php3" and the password field on the login page.

Recommendations For MyPhPim version 01.05, consider restricting access to the calendar.php3 page and the login page to minimize the risk of exploitation. As a temporary workaround, avoid using the cal id parameter in calendar.php3 and the password field on the login page until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2006-0167

Affected Products

Myphpim

References · 12

• 🔥 http://evuln.com/vulns/22/summary.html · Exploit
• 🔥 http://securityfocus.com/bid/16210 · Exploit
• 🔥 https://exploit-db.com/exploits/27067 · Exploit
• 🔥 https://exploit-db.com/exploits/27068 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-0167 · Security Note
• http://secunia.com/advisories/18399 · Vendor Advisory
• http://osvdb.org/22324 · Note
• http://vupen.com/english/advisories/2006/0147 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24066 · Note
• http://osvdb.org/22325 · Note
• http://securityfocus.com/archive/1/421863/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24075 · Note