Search
Find a vulnerability
Search criteria
10 vulnerabilities by dsportal
CVE-2006-1237 (GCVE-0-2006-1237)
Vulnerability from nvd – Published: 2006-03-15 16:00 – Updated: 2024-08-07 17:03
VLAI
EPSS
VEX
Summary
Multiple SQL injection vulnerabilities in DSNewsletter 1.0, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the email parameter to (1) include/sub.php, (2) include/confirm.php, or (3) include/unconfirm.php.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
11 references
| URL | Tags |
|---|---|
| http://secunia.com/advisories/19207 | third-party-advisoryx_refsource_SECUNIA |
| http://www.vupen.com/english/advisories/2006/0931 | vdb-entryx_refsource_VUPEN |
| http://www.securityfocus.com/bid/17111 | vdb-entryx_refsource_BID |
| http://securityreason.com/securityalert/623 | third-party-advisoryx_refsource_SREASON |
| http://www.osvdb.org/23883 | vdb-entryx_refsource_OSVDB |
| http://evuln.com/vulns/97/summary.html | x_refsource_MISC |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://securitytracker.com/id?1015757 | vdb-entryx_refsource_SECTRACK |
| http://www.securityfocus.com/archive/1/428664/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.osvdb.org/23885 | vdb-entryx_refsource_OSVDB |
| http://www.osvdb.org/23884 | vdb-entryx_refsource_OSVDB |
Date Public
2006-03-12 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T17:03:28.575Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "19207",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/19207"
},
{
"name": "ADV-2006-0931",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/0931"
},
{
"name": "17111",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/17111"
},
{
"name": "623",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/623"
},
{
"name": "23883",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/23883"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://evuln.com/vulns/97/summary.html"
},
{
"name": "dsnewsletter-email-sql-injection(25188)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25188"
},
{
"name": "1015757",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015757"
},
{
"name": "20060324 [eVuln] DSNewsletter SQL Injection Vulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/428664/100/0/threaded"
},
{
"name": "23885",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/23885"
},
{
"name": "23884",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/23884"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-03-12T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple SQL injection vulnerabilities in DSNewsletter 1.0, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the email parameter to (1) include/sub.php, (2) include/confirm.php, or (3) include/unconfirm.php."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-18T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "19207",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/19207"
},
{
"name": "ADV-2006-0931",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/0931"
},
{
"name": "17111",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/17111"
},
{
"name": "623",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/623"
},
{
"name": "23883",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/23883"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://evuln.com/vulns/97/summary.html"
},
{
"name": "dsnewsletter-email-sql-injection(25188)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25188"
},
{
"name": "1015757",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015757"
},
{
"name": "20060324 [eVuln] DSNewsletter SQL Injection Vulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/428664/100/0/threaded"
},
{
"name": "23885",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/23885"
},
{
"name": "23884",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/23884"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-1237",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple SQL injection vulnerabilities in DSNewsletter 1.0, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the email parameter to (1) include/sub.php, (2) include/confirm.php, or (3) include/unconfirm.php."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "19207",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/19207"
},
{
"name": "ADV-2006-0931",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/0931"
},
{
"name": "17111",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/17111"
},
{
"name": "623",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/623"
},
{
"name": "23883",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/23883"
},
{
"name": "http://evuln.com/vulns/97/summary.html",
"refsource": "MISC",
"url": "http://evuln.com/vulns/97/summary.html"
},
{
"name": "dsnewsletter-email-sql-injection(25188)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25188"
},
{
"name": "1015757",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015757"
},
{
"name": "20060324 [eVuln] DSNewsletter SQL Injection Vulnerability",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/428664/100/0/threaded"
},
{
"name": "23885",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/23885"
},
{
"name": "23884",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/23884"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-1237",
"datePublished": "2006-03-15T16:00:00.000Z",
"dateReserved": "2006-03-15T00:00:00.000Z",
"dateUpdated": "2024-08-07T17:03:28.575Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-1238 (GCVE-0-2006-1238)
Vulnerability from nvd – Published: 2006-03-15 16:00 – Updated: 2024-08-07 17:03
VLAI
EPSS
VEX
Summary
SQL injection vulnerability in DSLogin 1.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the $log_userid variable in (1) index.php and (2) admin/index.php.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| http://www.vupen.com/english/advisories/2006/0953 | vdb-entryx_refsource_VUPEN |
| http://securitytracker.com/id?1015754 | vdb-entryx_refsource_SECTRACK |
| http://www.securityfocus.com/bid/17262 | vdb-entryx_refsource_BID |
| http://www.osvdb.org/23896 | vdb-entryx_refsource_OSVDB |
| http://www.securityfocus.com/archive/1/428902/100… | mailing-listx_refsource_BUGTRAQ |
| http://securityreason.com/securityalert/637 | third-party-advisoryx_refsource_SREASON |
| http://evuln.com/vulns/100/summary.html | x_refsource_MISC |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://secunia.com/advisories/19201 | third-party-advisoryx_refsource_SECUNIA |
Date Public
2006-03-12 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T17:03:28.700Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "ADV-2006-0953",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/0953"
},
{
"name": "1015754",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015754"
},
{
"name": "17262",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/17262"
},
{
"name": "23896",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/23896"
},
{
"name": "20060327 [eVuln] DSLogin Authentication Bypass Vulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/428902/100/0/threaded"
},
{
"name": "637",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/637"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://evuln.com/vulns/100/summary.html"
},
{
"name": "dslogin-index-sql-injection(25194)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25194"
},
{
"name": "19201",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/19201"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-03-12T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "SQL injection vulnerability in DSLogin 1.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the $log_userid variable in (1) index.php and (2) admin/index.php."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-18T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "ADV-2006-0953",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/0953"
},
{
"name": "1015754",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015754"
},
{
"name": "17262",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/17262"
},
{
"name": "23896",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/23896"
},
{
"name": "20060327 [eVuln] DSLogin Authentication Bypass Vulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/428902/100/0/threaded"
},
{
"name": "637",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/637"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://evuln.com/vulns/100/summary.html"
},
{
"name": "dslogin-index-sql-injection(25194)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25194"
},
{
"name": "19201",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/19201"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-1238",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "SQL injection vulnerability in DSLogin 1.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the $log_userid variable in (1) index.php and (2) admin/index.php."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "ADV-2006-0953",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/0953"
},
{
"name": "1015754",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015754"
},
{
"name": "17262",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/17262"
},
{
"name": "23896",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/23896"
},
{
"name": "20060327 [eVuln] DSLogin Authentication Bypass Vulnerability",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/428902/100/0/threaded"
},
{
"name": "637",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/637"
},
{
"name": "http://evuln.com/vulns/100/summary.html",
"refsource": "MISC",
"url": "http://evuln.com/vulns/100/summary.html"
},
{
"name": "dslogin-index-sql-injection(25194)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25194"
},
{
"name": "19201",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/19201"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-1238",
"datePublished": "2006-03-15T16:00:00.000Z",
"dateReserved": "2006-03-15T00:00:00.000Z",
"dateUpdated": "2024-08-07T17:03:28.700Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-1232 (GCVE-0-2006-1232)
Vulnerability from nvd – Published: 2006-03-14 19:00 – Updated: 2024-08-07 17:03
VLAI
EPSS
VEX
Summary
Multiple SQL injection vulnerabilities in DSDownload 1.0, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the (1) key and (2) category parameters to (a) search.php and (b) downloads.php.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
10 references
| URL | Tags |
|---|---|
| http://www.osvdb.org/23886 | vdb-entryx_refsource_OSVDB |
| http://securitytracker.com/id?1015755 | vdb-entryx_refsource_SECTRACK |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://evuln.com/vulns/99/summary.html | x_refsource_MISC |
| http://www.securityfocus.com/bid/17116 | vdb-entryx_refsource_BID |
| http://secunia.com/advisories/19202 | third-party-advisoryx_refsource_SECUNIA |
| http://www.osvdb.org/23887 | vdb-entryx_refsource_OSVDB |
| http://securityreason.com/securityalert/626 | third-party-advisoryx_refsource_SREASON |
| http://www.vupen.com/english/advisories/2006/0934 | vdb-entryx_refsource_VUPEN |
| http://www.securityfocus.com/archive/1/428808/100… | mailing-listx_refsource_BUGTRAQ |
Date Public
2006-03-12 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T17:03:28.702Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "23886",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/23886"
},
{
"name": "1015755",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015755"
},
{
"name": "dsdownload-multiple-sql-injection(25193)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25193"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://evuln.com/vulns/99/summary.html"
},
{
"name": "17116",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/17116"
},
{
"name": "19202",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/19202"
},
{
"name": "23887",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/23887"
},
{
"name": "626",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/626"
},
{
"name": "ADV-2006-0934",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/0934"
},
{
"name": "20060325 [eVuln] DSDownload Multiple SQL Injection Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/428808/100/0/threaded"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-03-12T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple SQL injection vulnerabilities in DSDownload 1.0, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the (1) key and (2) category parameters to (a) search.php and (b) downloads.php."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-18T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "23886",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/23886"
},
{
"name": "1015755",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015755"
},
{
"name": "dsdownload-multiple-sql-injection(25193)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25193"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://evuln.com/vulns/99/summary.html"
},
{
"name": "17116",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/17116"
},
{
"name": "19202",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/19202"
},
{
"name": "23887",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/23887"
},
{
"name": "626",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/626"
},
{
"name": "ADV-2006-0934",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/0934"
},
{
"name": "20060325 [eVuln] DSDownload Multiple SQL Injection Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/428808/100/0/threaded"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-1232",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple SQL injection vulnerabilities in DSDownload 1.0, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the (1) key and (2) category parameters to (a) search.php and (b) downloads.php."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "23886",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/23886"
},
{
"name": "1015755",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015755"
},
{
"name": "dsdownload-multiple-sql-injection(25193)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25193"
},
{
"name": "http://evuln.com/vulns/99/summary.html",
"refsource": "MISC",
"url": "http://evuln.com/vulns/99/summary.html"
},
{
"name": "17116",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/17116"
},
{
"name": "19202",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/19202"
},
{
"name": "23887",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/23887"
},
{
"name": "626",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/626"
},
{
"name": "ADV-2006-0934",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/0934"
},
{
"name": "20060325 [eVuln] DSDownload Multiple SQL Injection Vulnerabilities",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/428808/100/0/threaded"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-1232",
"datePublished": "2006-03-14T19:00:00.000Z",
"dateReserved": "2006-03-14T00:00:00.000Z",
"dateUpdated": "2024-08-07T17:03:28.702Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-1234 (GCVE-0-2006-1234)
Vulnerability from nvd – Published: 2006-03-14 19:00 – Updated: 2024-08-07 17:03
VLAI
EPSS
VEX
Summary
SQL injection vulnerability in index.php in DSCounter 1.2, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For field (HTTP_X_FORWARDED_FOR environment variable) in an HTTP header.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| http://www.osvdb.org/23882 | vdb-entryx_refsource_OSVDB |
| http://www.securityfocus.com/archive/1/428807/100… | mailing-listx_refsource_BUGTRAQ |
| http://securitytracker.com/id?1015756 | vdb-entryx_refsource_SECTRACK |
| http://secunia.com/advisories/19206 | third-party-advisoryx_refsource_SECUNIA |
| http://securityreason.com/securityalert/627 | third-party-advisoryx_refsource_SREASON |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.vupen.com/english/advisories/2006/0933 | vdb-entryx_refsource_VUPEN |
| http://evuln.com/vulns/98/summary.html | x_refsource_MISC |
| http://www.securityfocus.com/bid/17112 | vdb-entryx_refsource_BID |
Date Public
2006-03-12 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T17:03:28.702Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "23882",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/23882"
},
{
"name": "20060325 [eVuln] DSCounter \u0027X-Forwarded-For\u0027 SQL Injection Vulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/428807/100/0/threaded"
},
{
"name": "1015756",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015756"
},
{
"name": "19206",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/19206"
},
{
"name": "627",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/627"
},
{
"name": "dscounter-index-sql-injection(25190)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25190"
},
{
"name": "ADV-2006-0933",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/0933"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://evuln.com/vulns/98/summary.html"
},
{
"name": "17112",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/17112"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-03-12T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "SQL injection vulnerability in index.php in DSCounter 1.2, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For field (HTTP_X_FORWARDED_FOR environment variable) in an HTTP header."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-18T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "23882",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/23882"
},
{
"name": "20060325 [eVuln] DSCounter \u0027X-Forwarded-For\u0027 SQL Injection Vulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/428807/100/0/threaded"
},
{
"name": "1015756",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015756"
},
{
"name": "19206",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/19206"
},
{
"name": "627",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/627"
},
{
"name": "dscounter-index-sql-injection(25190)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25190"
},
{
"name": "ADV-2006-0933",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/0933"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://evuln.com/vulns/98/summary.html"
},
{
"name": "17112",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/17112"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-1234",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "SQL injection vulnerability in index.php in DSCounter 1.2, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For field (HTTP_X_FORWARDED_FOR environment variable) in an HTTP header."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "23882",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/23882"
},
{
"name": "20060325 [eVuln] DSCounter \u0027X-Forwarded-For\u0027 SQL Injection Vulnerability",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/428807/100/0/threaded"
},
{
"name": "1015756",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015756"
},
{
"name": "19206",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/19206"
},
{
"name": "627",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/627"
},
{
"name": "dscounter-index-sql-injection(25190)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25190"
},
{
"name": "ADV-2006-0933",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/0933"
},
{
"name": "http://evuln.com/vulns/98/summary.html",
"refsource": "MISC",
"url": "http://evuln.com/vulns/98/summary.html"
},
{
"name": "17112",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/17112"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-1234",
"datePublished": "2006-03-14T19:00:00.000Z",
"dateReserved": "2006-03-14T00:00:00.000Z",
"dateUpdated": "2024-08-07T17:03:28.702Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-1217 (GCVE-0-2006-1217)
Vulnerability from nvd – Published: 2006-03-14 02:00 – Updated: 2024-08-07 17:03
VLAI
EPSS
VEX
Summary
SQL injection vulnerability in DSPoll 1.1 allows remote attackers to execute arbitrary SQL commands via the pollid parameter to (1) results.php, (2) topolls.php, (3) pollit.php.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
12 references
| URL | Tags |
|---|---|
| http://www.osvdb.org/23881 | vdb-entryx_refsource_OSVDB |
| http://secunia.com/advisories/19209 | third-party-advisoryx_refsource_SECUNIA |
| http://securitytracker.com/id?1015758 | vdb-entryx_refsource_SECTRACK |
| http://www.osvdb.org/23879 | vdb-entryx_refsource_OSVDB |
| http://www.securityfocus.com/bid/17103 | vdb-entryx_refsource_BID |
| http://www.osvdb.org/23880 | vdb-entryx_refsource_OSVDB |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://securityreason.com/securityalert/620 | third-party-advisoryx_refsource_SREASON |
| http://www.securityfocus.com/archive/1/428663/100… | mailing-listx_refsource_BUGTRAQ |
| http://securityreason.com/securityalert/622 | third-party-advisoryx_refsource_SREASON |
| http://www.vupen.com/english/advisories/2006/0932 | vdb-entryx_refsource_VUPEN |
| http://evuln.com/vulns/96/summary.html | x_refsource_MISC |
Date Public
2006-03-12 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T17:03:28.556Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "23881",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/23881"
},
{
"name": "19209",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/19209"
},
{
"name": "1015758",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015758"
},
{
"name": "23879",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/23879"
},
{
"name": "17103",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/17103"
},
{
"name": "23880",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/23880"
},
{
"name": "dspoll-pollid-sql-injection(25192)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25192"
},
{
"name": "620",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/620"
},
{
"name": "20060324 [eVuln] DSPoll Multiple SQL Injection Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/428663/100/0/threaded"
},
{
"name": "622",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/622"
},
{
"name": "ADV-2006-0932",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/0932"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://evuln.com/vulns/96/summary.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-03-12T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "SQL injection vulnerability in DSPoll 1.1 allows remote attackers to execute arbitrary SQL commands via the pollid parameter to (1) results.php, (2) topolls.php, (3) pollit.php."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-18T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "23881",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/23881"
},
{
"name": "19209",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/19209"
},
{
"name": "1015758",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015758"
},
{
"name": "23879",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/23879"
},
{
"name": "17103",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/17103"
},
{
"name": "23880",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/23880"
},
{
"name": "dspoll-pollid-sql-injection(25192)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25192"
},
{
"name": "620",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/620"
},
{
"name": "20060324 [eVuln] DSPoll Multiple SQL Injection Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/428663/100/0/threaded"
},
{
"name": "622",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/622"
},
{
"name": "ADV-2006-0932",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/0932"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://evuln.com/vulns/96/summary.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-1217",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "SQL injection vulnerability in DSPoll 1.1 allows remote attackers to execute arbitrary SQL commands via the pollid parameter to (1) results.php, (2) topolls.php, (3) pollit.php."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "23881",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/23881"
},
{
"name": "19209",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/19209"
},
{
"name": "1015758",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015758"
},
{
"name": "23879",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/23879"
},
{
"name": "17103",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/17103"
},
{
"name": "23880",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/23880"
},
{
"name": "dspoll-pollid-sql-injection(25192)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25192"
},
{
"name": "620",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/620"
},
{
"name": "20060324 [eVuln] DSPoll Multiple SQL Injection Vulnerabilities",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/428663/100/0/threaded"
},
{
"name": "622",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/622"
},
{
"name": "ADV-2006-0932",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/0932"
},
{
"name": "http://evuln.com/vulns/96/summary.html",
"refsource": "MISC",
"url": "http://evuln.com/vulns/96/summary.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-1217",
"datePublished": "2006-03-14T02:00:00.000Z",
"dateReserved": "2006-03-14T00:00:00.000Z",
"dateUpdated": "2024-08-07T17:03:28.556Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-1237 (GCVE-0-2006-1237)
Vulnerability from cvelistv5 – Published: 2006-03-15 16:00 – Updated: 2024-08-07 17:03
VLAI
EPSS
VEX
Summary
Multiple SQL injection vulnerabilities in DSNewsletter 1.0, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the email parameter to (1) include/sub.php, (2) include/confirm.php, or (3) include/unconfirm.php.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
11 references
| URL | Tags |
|---|---|
| http://secunia.com/advisories/19207 | third-party-advisoryx_refsource_SECUNIA |
| http://www.vupen.com/english/advisories/2006/0931 | vdb-entryx_refsource_VUPEN |
| http://www.securityfocus.com/bid/17111 | vdb-entryx_refsource_BID |
| http://securityreason.com/securityalert/623 | third-party-advisoryx_refsource_SREASON |
| http://www.osvdb.org/23883 | vdb-entryx_refsource_OSVDB |
| http://evuln.com/vulns/97/summary.html | x_refsource_MISC |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://securitytracker.com/id?1015757 | vdb-entryx_refsource_SECTRACK |
| http://www.securityfocus.com/archive/1/428664/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.osvdb.org/23885 | vdb-entryx_refsource_OSVDB |
| http://www.osvdb.org/23884 | vdb-entryx_refsource_OSVDB |
Date Public
2006-03-12 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T17:03:28.575Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "19207",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/19207"
},
{
"name": "ADV-2006-0931",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/0931"
},
{
"name": "17111",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/17111"
},
{
"name": "623",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/623"
},
{
"name": "23883",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/23883"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://evuln.com/vulns/97/summary.html"
},
{
"name": "dsnewsletter-email-sql-injection(25188)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25188"
},
{
"name": "1015757",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015757"
},
{
"name": "20060324 [eVuln] DSNewsletter SQL Injection Vulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/428664/100/0/threaded"
},
{
"name": "23885",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/23885"
},
{
"name": "23884",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/23884"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-03-12T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple SQL injection vulnerabilities in DSNewsletter 1.0, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the email parameter to (1) include/sub.php, (2) include/confirm.php, or (3) include/unconfirm.php."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-18T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "19207",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/19207"
},
{
"name": "ADV-2006-0931",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/0931"
},
{
"name": "17111",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/17111"
},
{
"name": "623",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/623"
},
{
"name": "23883",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/23883"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://evuln.com/vulns/97/summary.html"
},
{
"name": "dsnewsletter-email-sql-injection(25188)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25188"
},
{
"name": "1015757",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015757"
},
{
"name": "20060324 [eVuln] DSNewsletter SQL Injection Vulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/428664/100/0/threaded"
},
{
"name": "23885",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/23885"
},
{
"name": "23884",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/23884"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-1237",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple SQL injection vulnerabilities in DSNewsletter 1.0, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the email parameter to (1) include/sub.php, (2) include/confirm.php, or (3) include/unconfirm.php."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "19207",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/19207"
},
{
"name": "ADV-2006-0931",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/0931"
},
{
"name": "17111",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/17111"
},
{
"name": "623",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/623"
},
{
"name": "23883",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/23883"
},
{
"name": "http://evuln.com/vulns/97/summary.html",
"refsource": "MISC",
"url": "http://evuln.com/vulns/97/summary.html"
},
{
"name": "dsnewsletter-email-sql-injection(25188)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25188"
},
{
"name": "1015757",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015757"
},
{
"name": "20060324 [eVuln] DSNewsletter SQL Injection Vulnerability",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/428664/100/0/threaded"
},
{
"name": "23885",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/23885"
},
{
"name": "23884",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/23884"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-1237",
"datePublished": "2006-03-15T16:00:00.000Z",
"dateReserved": "2006-03-15T00:00:00.000Z",
"dateUpdated": "2024-08-07T17:03:28.575Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-1238 (GCVE-0-2006-1238)
Vulnerability from cvelistv5 – Published: 2006-03-15 16:00 – Updated: 2024-08-07 17:03
VLAI
EPSS
VEX
Summary
SQL injection vulnerability in DSLogin 1.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the $log_userid variable in (1) index.php and (2) admin/index.php.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| http://www.vupen.com/english/advisories/2006/0953 | vdb-entryx_refsource_VUPEN |
| http://securitytracker.com/id?1015754 | vdb-entryx_refsource_SECTRACK |
| http://www.securityfocus.com/bid/17262 | vdb-entryx_refsource_BID |
| http://www.osvdb.org/23896 | vdb-entryx_refsource_OSVDB |
| http://www.securityfocus.com/archive/1/428902/100… | mailing-listx_refsource_BUGTRAQ |
| http://securityreason.com/securityalert/637 | third-party-advisoryx_refsource_SREASON |
| http://evuln.com/vulns/100/summary.html | x_refsource_MISC |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://secunia.com/advisories/19201 | third-party-advisoryx_refsource_SECUNIA |
Date Public
2006-03-12 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T17:03:28.700Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "ADV-2006-0953",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/0953"
},
{
"name": "1015754",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015754"
},
{
"name": "17262",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/17262"
},
{
"name": "23896",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/23896"
},
{
"name": "20060327 [eVuln] DSLogin Authentication Bypass Vulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/428902/100/0/threaded"
},
{
"name": "637",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/637"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://evuln.com/vulns/100/summary.html"
},
{
"name": "dslogin-index-sql-injection(25194)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25194"
},
{
"name": "19201",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/19201"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-03-12T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "SQL injection vulnerability in DSLogin 1.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the $log_userid variable in (1) index.php and (2) admin/index.php."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-18T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "ADV-2006-0953",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/0953"
},
{
"name": "1015754",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015754"
},
{
"name": "17262",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/17262"
},
{
"name": "23896",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/23896"
},
{
"name": "20060327 [eVuln] DSLogin Authentication Bypass Vulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/428902/100/0/threaded"
},
{
"name": "637",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/637"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://evuln.com/vulns/100/summary.html"
},
{
"name": "dslogin-index-sql-injection(25194)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25194"
},
{
"name": "19201",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/19201"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-1238",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "SQL injection vulnerability in DSLogin 1.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the $log_userid variable in (1) index.php and (2) admin/index.php."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "ADV-2006-0953",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/0953"
},
{
"name": "1015754",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015754"
},
{
"name": "17262",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/17262"
},
{
"name": "23896",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/23896"
},
{
"name": "20060327 [eVuln] DSLogin Authentication Bypass Vulnerability",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/428902/100/0/threaded"
},
{
"name": "637",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/637"
},
{
"name": "http://evuln.com/vulns/100/summary.html",
"refsource": "MISC",
"url": "http://evuln.com/vulns/100/summary.html"
},
{
"name": "dslogin-index-sql-injection(25194)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25194"
},
{
"name": "19201",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/19201"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-1238",
"datePublished": "2006-03-15T16:00:00.000Z",
"dateReserved": "2006-03-15T00:00:00.000Z",
"dateUpdated": "2024-08-07T17:03:28.700Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-1232 (GCVE-0-2006-1232)
Vulnerability from cvelistv5 – Published: 2006-03-14 19:00 – Updated: 2024-08-07 17:03
VLAI
EPSS
VEX
Summary
Multiple SQL injection vulnerabilities in DSDownload 1.0, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the (1) key and (2) category parameters to (a) search.php and (b) downloads.php.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
10 references
| URL | Tags |
|---|---|
| http://www.osvdb.org/23886 | vdb-entryx_refsource_OSVDB |
| http://securitytracker.com/id?1015755 | vdb-entryx_refsource_SECTRACK |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://evuln.com/vulns/99/summary.html | x_refsource_MISC |
| http://www.securityfocus.com/bid/17116 | vdb-entryx_refsource_BID |
| http://secunia.com/advisories/19202 | third-party-advisoryx_refsource_SECUNIA |
| http://www.osvdb.org/23887 | vdb-entryx_refsource_OSVDB |
| http://securityreason.com/securityalert/626 | third-party-advisoryx_refsource_SREASON |
| http://www.vupen.com/english/advisories/2006/0934 | vdb-entryx_refsource_VUPEN |
| http://www.securityfocus.com/archive/1/428808/100… | mailing-listx_refsource_BUGTRAQ |
Date Public
2006-03-12 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T17:03:28.702Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "23886",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/23886"
},
{
"name": "1015755",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015755"
},
{
"name": "dsdownload-multiple-sql-injection(25193)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25193"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://evuln.com/vulns/99/summary.html"
},
{
"name": "17116",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/17116"
},
{
"name": "19202",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/19202"
},
{
"name": "23887",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/23887"
},
{
"name": "626",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/626"
},
{
"name": "ADV-2006-0934",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/0934"
},
{
"name": "20060325 [eVuln] DSDownload Multiple SQL Injection Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/428808/100/0/threaded"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-03-12T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple SQL injection vulnerabilities in DSDownload 1.0, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the (1) key and (2) category parameters to (a) search.php and (b) downloads.php."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-18T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "23886",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/23886"
},
{
"name": "1015755",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015755"
},
{
"name": "dsdownload-multiple-sql-injection(25193)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25193"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://evuln.com/vulns/99/summary.html"
},
{
"name": "17116",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/17116"
},
{
"name": "19202",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/19202"
},
{
"name": "23887",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/23887"
},
{
"name": "626",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/626"
},
{
"name": "ADV-2006-0934",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/0934"
},
{
"name": "20060325 [eVuln] DSDownload Multiple SQL Injection Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/428808/100/0/threaded"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-1232",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple SQL injection vulnerabilities in DSDownload 1.0, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the (1) key and (2) category parameters to (a) search.php and (b) downloads.php."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "23886",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/23886"
},
{
"name": "1015755",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015755"
},
{
"name": "dsdownload-multiple-sql-injection(25193)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25193"
},
{
"name": "http://evuln.com/vulns/99/summary.html",
"refsource": "MISC",
"url": "http://evuln.com/vulns/99/summary.html"
},
{
"name": "17116",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/17116"
},
{
"name": "19202",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/19202"
},
{
"name": "23887",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/23887"
},
{
"name": "626",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/626"
},
{
"name": "ADV-2006-0934",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/0934"
},
{
"name": "20060325 [eVuln] DSDownload Multiple SQL Injection Vulnerabilities",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/428808/100/0/threaded"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-1232",
"datePublished": "2006-03-14T19:00:00.000Z",
"dateReserved": "2006-03-14T00:00:00.000Z",
"dateUpdated": "2024-08-07T17:03:28.702Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-1234 (GCVE-0-2006-1234)
Vulnerability from cvelistv5 – Published: 2006-03-14 19:00 – Updated: 2024-08-07 17:03
VLAI
EPSS
VEX
Summary
SQL injection vulnerability in index.php in DSCounter 1.2, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For field (HTTP_X_FORWARDED_FOR environment variable) in an HTTP header.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| http://www.osvdb.org/23882 | vdb-entryx_refsource_OSVDB |
| http://www.securityfocus.com/archive/1/428807/100… | mailing-listx_refsource_BUGTRAQ |
| http://securitytracker.com/id?1015756 | vdb-entryx_refsource_SECTRACK |
| http://secunia.com/advisories/19206 | third-party-advisoryx_refsource_SECUNIA |
| http://securityreason.com/securityalert/627 | third-party-advisoryx_refsource_SREASON |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.vupen.com/english/advisories/2006/0933 | vdb-entryx_refsource_VUPEN |
| http://evuln.com/vulns/98/summary.html | x_refsource_MISC |
| http://www.securityfocus.com/bid/17112 | vdb-entryx_refsource_BID |
Date Public
2006-03-12 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T17:03:28.702Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "23882",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/23882"
},
{
"name": "20060325 [eVuln] DSCounter \u0027X-Forwarded-For\u0027 SQL Injection Vulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/428807/100/0/threaded"
},
{
"name": "1015756",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015756"
},
{
"name": "19206",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/19206"
},
{
"name": "627",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/627"
},
{
"name": "dscounter-index-sql-injection(25190)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25190"
},
{
"name": "ADV-2006-0933",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/0933"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://evuln.com/vulns/98/summary.html"
},
{
"name": "17112",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/17112"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-03-12T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "SQL injection vulnerability in index.php in DSCounter 1.2, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For field (HTTP_X_FORWARDED_FOR environment variable) in an HTTP header."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-18T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "23882",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/23882"
},
{
"name": "20060325 [eVuln] DSCounter \u0027X-Forwarded-For\u0027 SQL Injection Vulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/428807/100/0/threaded"
},
{
"name": "1015756",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015756"
},
{
"name": "19206",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/19206"
},
{
"name": "627",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/627"
},
{
"name": "dscounter-index-sql-injection(25190)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25190"
},
{
"name": "ADV-2006-0933",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/0933"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://evuln.com/vulns/98/summary.html"
},
{
"name": "17112",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/17112"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-1234",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "SQL injection vulnerability in index.php in DSCounter 1.2, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For field (HTTP_X_FORWARDED_FOR environment variable) in an HTTP header."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "23882",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/23882"
},
{
"name": "20060325 [eVuln] DSCounter \u0027X-Forwarded-For\u0027 SQL Injection Vulnerability",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/428807/100/0/threaded"
},
{
"name": "1015756",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015756"
},
{
"name": "19206",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/19206"
},
{
"name": "627",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/627"
},
{
"name": "dscounter-index-sql-injection(25190)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25190"
},
{
"name": "ADV-2006-0933",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/0933"
},
{
"name": "http://evuln.com/vulns/98/summary.html",
"refsource": "MISC",
"url": "http://evuln.com/vulns/98/summary.html"
},
{
"name": "17112",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/17112"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-1234",
"datePublished": "2006-03-14T19:00:00.000Z",
"dateReserved": "2006-03-14T00:00:00.000Z",
"dateUpdated": "2024-08-07T17:03:28.702Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-1217 (GCVE-0-2006-1217)
Vulnerability from cvelistv5 – Published: 2006-03-14 02:00 – Updated: 2024-08-07 17:03
VLAI
EPSS
VEX
Summary
SQL injection vulnerability in DSPoll 1.1 allows remote attackers to execute arbitrary SQL commands via the pollid parameter to (1) results.php, (2) topolls.php, (3) pollit.php.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
12 references
| URL | Tags |
|---|---|
| http://www.osvdb.org/23881 | vdb-entryx_refsource_OSVDB |
| http://secunia.com/advisories/19209 | third-party-advisoryx_refsource_SECUNIA |
| http://securitytracker.com/id?1015758 | vdb-entryx_refsource_SECTRACK |
| http://www.osvdb.org/23879 | vdb-entryx_refsource_OSVDB |
| http://www.securityfocus.com/bid/17103 | vdb-entryx_refsource_BID |
| http://www.osvdb.org/23880 | vdb-entryx_refsource_OSVDB |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://securityreason.com/securityalert/620 | third-party-advisoryx_refsource_SREASON |
| http://www.securityfocus.com/archive/1/428663/100… | mailing-listx_refsource_BUGTRAQ |
| http://securityreason.com/securityalert/622 | third-party-advisoryx_refsource_SREASON |
| http://www.vupen.com/english/advisories/2006/0932 | vdb-entryx_refsource_VUPEN |
| http://evuln.com/vulns/96/summary.html | x_refsource_MISC |
Date Public
2006-03-12 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T17:03:28.556Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "23881",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/23881"
},
{
"name": "19209",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/19209"
},
{
"name": "1015758",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015758"
},
{
"name": "23879",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/23879"
},
{
"name": "17103",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/17103"
},
{
"name": "23880",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/23880"
},
{
"name": "dspoll-pollid-sql-injection(25192)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25192"
},
{
"name": "620",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/620"
},
{
"name": "20060324 [eVuln] DSPoll Multiple SQL Injection Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/428663/100/0/threaded"
},
{
"name": "622",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/622"
},
{
"name": "ADV-2006-0932",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/0932"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://evuln.com/vulns/96/summary.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-03-12T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "SQL injection vulnerability in DSPoll 1.1 allows remote attackers to execute arbitrary SQL commands via the pollid parameter to (1) results.php, (2) topolls.php, (3) pollit.php."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-18T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "23881",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/23881"
},
{
"name": "19209",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/19209"
},
{
"name": "1015758",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015758"
},
{
"name": "23879",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/23879"
},
{
"name": "17103",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/17103"
},
{
"name": "23880",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/23880"
},
{
"name": "dspoll-pollid-sql-injection(25192)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25192"
},
{
"name": "620",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/620"
},
{
"name": "20060324 [eVuln] DSPoll Multiple SQL Injection Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/428663/100/0/threaded"
},
{
"name": "622",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/622"
},
{
"name": "ADV-2006-0932",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/0932"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://evuln.com/vulns/96/summary.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-1217",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "SQL injection vulnerability in DSPoll 1.1 allows remote attackers to execute arbitrary SQL commands via the pollid parameter to (1) results.php, (2) topolls.php, (3) pollit.php."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "23881",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/23881"
},
{
"name": "19209",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/19209"
},
{
"name": "1015758",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015758"
},
{
"name": "23879",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/23879"
},
{
"name": "17103",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/17103"
},
{
"name": "23880",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/23880"
},
{
"name": "dspoll-pollid-sql-injection(25192)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25192"
},
{
"name": "620",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/620"
},
{
"name": "20060324 [eVuln] DSPoll Multiple SQL Injection Vulnerabilities",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/428663/100/0/threaded"
},
{
"name": "622",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/622"
},
{
"name": "ADV-2006-0932",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/0932"
},
{
"name": "http://evuln.com/vulns/96/summary.html",
"refsource": "MISC",
"url": "http://evuln.com/vulns/96/summary.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-1217",
"datePublished": "2006-03-14T02:00:00.000Z",
"dateReserved": "2006-03-14T00:00:00.000Z",
"dateUpdated": "2024-08-07T17:03:28.556Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}