PT-2006-3455 · Unknown · Stylish Text Ads Script

Luny · Published 2006-05-22 · Updated 2018-10-18 · CVE-2006-2508

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Stylish Text Ads Script version (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary SQL commands, possibly involving an attack vector using advertise.php, by exploiting a SQL injection vulnerability in tr1.php via the id parameter.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2006-2508

Affected Products

Stylish Text Ads Script

References · 10

• 🔥 http://osvdb.org/25691 · Exploit
• 🔥 http://securityfocus.com/bid/18044 · Exploit
• 🔥 http://osvdb.org/25692 · Exploit
• http://secunia.com/advisories/20213 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-2508 · Security Note
• http://securityfocus.com/archive/1/434527/100/0/threaded · Note
• http://vupen.com/english/advisories/2006/1897 · Note
• http://securityreason.com/securityalert/931 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26569 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26570 · Note