Search
Find a vulnerability
Search criteria
4 vulnerabilities by pdfdirectory
CVE-2006-0313 (GCVE-0-2006-0313)
Vulnerability from nvd – Published: 2006-01-19 01:00 – Updated: 2024-08-07 16:34
VLAI
EPSS
VEX
Summary
Multiple SQL injection vulnerabilities in PDFdirectory before 1.0 allow remote attackers to execute arbitrary SQL commands via multiple unspecified vectors involving (1) util.php, (2) userpref.php, (3) user.php, (4) uploadfrm.php, (5) title.php, (6) team.php, (7) stats.php, (8) page.php, (9) org.php, (10) member.php, (11) index.php, (12) group.php, or (13) anniv.php.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
17 references
| URL | Tags |
|---|---|
| http://www.osvdb.org/22412 | vdb-entryx_refsource_OSVDB |
| http://www.osvdb.org/22407 | vdb-entryx_refsource_OSVDB |
| http://www.osvdb.org/22405 | vdb-entryx_refsource_OSVDB |
| http://www.osvdb.org/22411 | vdb-entryx_refsource_OSVDB |
| http://sourceforge.net/project/shownotes.php?rele… | x_refsource_CONFIRM |
| http://www.securityfocus.com/bid/16273 | vdb-entryx_refsource_BID |
| http://www.osvdb.org/22404 | vdb-entryx_refsource_OSVDB |
| http://secunia.com/advisories/18459 | third-party-advisoryx_refsource_SECUNIA |
| http://www.osvdb.org/22403 | vdb-entryx_refsource_OSVDB |
| http://www.osvdb.org/22410 | vdb-entryx_refsource_OSVDB |
| http://www.vupen.com/english/advisories/2006/0231 | vdb-entryx_refsource_VUPEN |
| http://www.osvdb.org/22409 | vdb-entryx_refsource_OSVDB |
| http://www.osvdb.org/22406 | vdb-entryx_refsource_OSVDB |
| http://www.osvdb.org/22408 | vdb-entryx_refsource_OSVDB |
| http://www.osvdb.org/22414 | vdb-entryx_refsource_OSVDB |
| http://www.osvdb.org/22415 | vdb-entryx_refsource_OSVDB |
| http://www.osvdb.org/22413 | vdb-entryx_refsource_OSVDB |
Date Public
2006-01-02 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T16:34:13.824Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "22412",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22412"
},
{
"name": "22407",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22407"
},
{
"name": "22405",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22405"
},
{
"name": "22411",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22411"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://sourceforge.net/project/shownotes.php?release_id=382411\u0026group_id=122682"
},
{
"name": "16273",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/16273"
},
{
"name": "22404",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22404"
},
{
"name": "18459",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/18459"
},
{
"name": "22403",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22403"
},
{
"name": "22410",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22410"
},
{
"name": "ADV-2006-0231",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/0231"
},
{
"name": "22409",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22409"
},
{
"name": "22406",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22406"
},
{
"name": "22408",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22408"
},
{
"name": "22414",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22414"
},
{
"name": "22415",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22415"
},
{
"name": "22413",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22413"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-01-02T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple SQL injection vulnerabilities in PDFdirectory before 1.0 allow remote attackers to execute arbitrary SQL commands via multiple unspecified vectors involving (1) util.php, (2) userpref.php, (3) user.php, (4) uploadfrm.php, (5) title.php, (6) team.php, (7) stats.php, (8) page.php, (9) org.php, (10) member.php, (11) index.php, (12) group.php, or (13) anniv.php."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2009-02-26T10:00:00.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "22412",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22412"
},
{
"name": "22407",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22407"
},
{
"name": "22405",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22405"
},
{
"name": "22411",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22411"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://sourceforge.net/project/shownotes.php?release_id=382411\u0026group_id=122682"
},
{
"name": "16273",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/16273"
},
{
"name": "22404",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22404"
},
{
"name": "18459",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/18459"
},
{
"name": "22403",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22403"
},
{
"name": "22410",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22410"
},
{
"name": "ADV-2006-0231",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/0231"
},
{
"name": "22409",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22409"
},
{
"name": "22406",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22406"
},
{
"name": "22408",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22408"
},
{
"name": "22414",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22414"
},
{
"name": "22415",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22415"
},
{
"name": "22413",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22413"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-0313",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple SQL injection vulnerabilities in PDFdirectory before 1.0 allow remote attackers to execute arbitrary SQL commands via multiple unspecified vectors involving (1) util.php, (2) userpref.php, (3) user.php, (4) uploadfrm.php, (5) title.php, (6) team.php, (7) stats.php, (8) page.php, (9) org.php, (10) member.php, (11) index.php, (12) group.php, or (13) anniv.php."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "22412",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22412"
},
{
"name": "22407",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22407"
},
{
"name": "22405",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22405"
},
{
"name": "22411",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22411"
},
{
"name": "http://sourceforge.net/project/shownotes.php?release_id=382411\u0026group_id=122682",
"refsource": "CONFIRM",
"url": "http://sourceforge.net/project/shownotes.php?release_id=382411\u0026group_id=122682"
},
{
"name": "16273",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/16273"
},
{
"name": "22404",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22404"
},
{
"name": "18459",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/18459"
},
{
"name": "22403",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22403"
},
{
"name": "22410",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22410"
},
{
"name": "ADV-2006-0231",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/0231"
},
{
"name": "22409",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22409"
},
{
"name": "22406",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22406"
},
{
"name": "22408",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22408"
},
{
"name": "22414",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22414"
},
{
"name": "22415",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22415"
},
{
"name": "22413",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22413"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-0313",
"datePublished": "2006-01-19T01:00:00.000Z",
"dateReserved": "2006-01-19T00:00:00.000Z",
"dateUpdated": "2024-08-07T16:34:13.824Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-0314 (GCVE-0-2006-0314)
Vulnerability from nvd – Published: 2006-01-19 01:00 – Updated: 2024-09-16 22:44
VLAI
EPSS
VEX
Summary
PDFdirectory before 1.0 stores sensitive data in plaintext, which allows remote attackers to obtain arbitrary users' passwords by direct queries to the database, possibly via one of the SQL injection vulnerabilities.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
2 references
| URL | Tags |
|---|---|
| http://sourceforge.net/project/shownotes.php?rele… | x_refsource_CONFIRM |
| http://www.osvdb.org/22402 | vdb-entryx_refsource_OSVDB |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T16:34:13.706Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://sourceforge.net/project/shownotes.php?release_id=382411\u0026group_id=122682"
},
{
"name": "22402",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22402"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "PDFdirectory before 1.0 stores sensitive data in plaintext, which allows remote attackers to obtain arbitrary users\u0027 passwords by direct queries to the database, possibly via one of the SQL injection vulnerabilities."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2006-01-19T01:00:00.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://sourceforge.net/project/shownotes.php?release_id=382411\u0026group_id=122682"
},
{
"name": "22402",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22402"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-0314",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "PDFdirectory before 1.0 stores sensitive data in plaintext, which allows remote attackers to obtain arbitrary users\u0027 passwords by direct queries to the database, possibly via one of the SQL injection vulnerabilities."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://sourceforge.net/project/shownotes.php?release_id=382411\u0026group_id=122682",
"refsource": "CONFIRM",
"url": "http://sourceforge.net/project/shownotes.php?release_id=382411\u0026group_id=122682"
},
{
"name": "22402",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22402"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-0314",
"datePublished": "2006-01-19T01:00:00.000Z",
"dateReserved": "2006-01-19T00:00:00.000Z",
"dateUpdated": "2024-09-16T22:44:57.917Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-0313 (GCVE-0-2006-0313)
Vulnerability from cvelistv5 – Published: 2006-01-19 01:00 – Updated: 2024-08-07 16:34
VLAI
EPSS
VEX
Summary
Multiple SQL injection vulnerabilities in PDFdirectory before 1.0 allow remote attackers to execute arbitrary SQL commands via multiple unspecified vectors involving (1) util.php, (2) userpref.php, (3) user.php, (4) uploadfrm.php, (5) title.php, (6) team.php, (7) stats.php, (8) page.php, (9) org.php, (10) member.php, (11) index.php, (12) group.php, or (13) anniv.php.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
17 references
| URL | Tags |
|---|---|
| http://www.osvdb.org/22412 | vdb-entryx_refsource_OSVDB |
| http://www.osvdb.org/22407 | vdb-entryx_refsource_OSVDB |
| http://www.osvdb.org/22405 | vdb-entryx_refsource_OSVDB |
| http://www.osvdb.org/22411 | vdb-entryx_refsource_OSVDB |
| http://sourceforge.net/project/shownotes.php?rele… | x_refsource_CONFIRM |
| http://www.securityfocus.com/bid/16273 | vdb-entryx_refsource_BID |
| http://www.osvdb.org/22404 | vdb-entryx_refsource_OSVDB |
| http://secunia.com/advisories/18459 | third-party-advisoryx_refsource_SECUNIA |
| http://www.osvdb.org/22403 | vdb-entryx_refsource_OSVDB |
| http://www.osvdb.org/22410 | vdb-entryx_refsource_OSVDB |
| http://www.vupen.com/english/advisories/2006/0231 | vdb-entryx_refsource_VUPEN |
| http://www.osvdb.org/22409 | vdb-entryx_refsource_OSVDB |
| http://www.osvdb.org/22406 | vdb-entryx_refsource_OSVDB |
| http://www.osvdb.org/22408 | vdb-entryx_refsource_OSVDB |
| http://www.osvdb.org/22414 | vdb-entryx_refsource_OSVDB |
| http://www.osvdb.org/22415 | vdb-entryx_refsource_OSVDB |
| http://www.osvdb.org/22413 | vdb-entryx_refsource_OSVDB |
Date Public
2006-01-02 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T16:34:13.824Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "22412",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22412"
},
{
"name": "22407",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22407"
},
{
"name": "22405",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22405"
},
{
"name": "22411",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22411"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://sourceforge.net/project/shownotes.php?release_id=382411\u0026group_id=122682"
},
{
"name": "16273",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/16273"
},
{
"name": "22404",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22404"
},
{
"name": "18459",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/18459"
},
{
"name": "22403",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22403"
},
{
"name": "22410",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22410"
},
{
"name": "ADV-2006-0231",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/0231"
},
{
"name": "22409",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22409"
},
{
"name": "22406",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22406"
},
{
"name": "22408",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22408"
},
{
"name": "22414",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22414"
},
{
"name": "22415",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22415"
},
{
"name": "22413",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22413"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-01-02T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple SQL injection vulnerabilities in PDFdirectory before 1.0 allow remote attackers to execute arbitrary SQL commands via multiple unspecified vectors involving (1) util.php, (2) userpref.php, (3) user.php, (4) uploadfrm.php, (5) title.php, (6) team.php, (7) stats.php, (8) page.php, (9) org.php, (10) member.php, (11) index.php, (12) group.php, or (13) anniv.php."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2009-02-26T10:00:00.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "22412",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22412"
},
{
"name": "22407",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22407"
},
{
"name": "22405",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22405"
},
{
"name": "22411",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22411"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://sourceforge.net/project/shownotes.php?release_id=382411\u0026group_id=122682"
},
{
"name": "16273",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/16273"
},
{
"name": "22404",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22404"
},
{
"name": "18459",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/18459"
},
{
"name": "22403",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22403"
},
{
"name": "22410",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22410"
},
{
"name": "ADV-2006-0231",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/0231"
},
{
"name": "22409",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22409"
},
{
"name": "22406",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22406"
},
{
"name": "22408",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22408"
},
{
"name": "22414",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22414"
},
{
"name": "22415",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22415"
},
{
"name": "22413",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22413"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-0313",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple SQL injection vulnerabilities in PDFdirectory before 1.0 allow remote attackers to execute arbitrary SQL commands via multiple unspecified vectors involving (1) util.php, (2) userpref.php, (3) user.php, (4) uploadfrm.php, (5) title.php, (6) team.php, (7) stats.php, (8) page.php, (9) org.php, (10) member.php, (11) index.php, (12) group.php, or (13) anniv.php."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "22412",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22412"
},
{
"name": "22407",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22407"
},
{
"name": "22405",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22405"
},
{
"name": "22411",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22411"
},
{
"name": "http://sourceforge.net/project/shownotes.php?release_id=382411\u0026group_id=122682",
"refsource": "CONFIRM",
"url": "http://sourceforge.net/project/shownotes.php?release_id=382411\u0026group_id=122682"
},
{
"name": "16273",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/16273"
},
{
"name": "22404",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22404"
},
{
"name": "18459",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/18459"
},
{
"name": "22403",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22403"
},
{
"name": "22410",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22410"
},
{
"name": "ADV-2006-0231",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/0231"
},
{
"name": "22409",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22409"
},
{
"name": "22406",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22406"
},
{
"name": "22408",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22408"
},
{
"name": "22414",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22414"
},
{
"name": "22415",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22415"
},
{
"name": "22413",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22413"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-0313",
"datePublished": "2006-01-19T01:00:00.000Z",
"dateReserved": "2006-01-19T00:00:00.000Z",
"dateUpdated": "2024-08-07T16:34:13.824Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-0314 (GCVE-0-2006-0314)
Vulnerability from cvelistv5 – Published: 2006-01-19 01:00 – Updated: 2024-09-16 22:44
VLAI
EPSS
VEX
Summary
PDFdirectory before 1.0 stores sensitive data in plaintext, which allows remote attackers to obtain arbitrary users' passwords by direct queries to the database, possibly via one of the SQL injection vulnerabilities.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
2 references
| URL | Tags |
|---|---|
| http://sourceforge.net/project/shownotes.php?rele… | x_refsource_CONFIRM |
| http://www.osvdb.org/22402 | vdb-entryx_refsource_OSVDB |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T16:34:13.706Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://sourceforge.net/project/shownotes.php?release_id=382411\u0026group_id=122682"
},
{
"name": "22402",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22402"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "PDFdirectory before 1.0 stores sensitive data in plaintext, which allows remote attackers to obtain arbitrary users\u0027 passwords by direct queries to the database, possibly via one of the SQL injection vulnerabilities."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2006-01-19T01:00:00.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://sourceforge.net/project/shownotes.php?release_id=382411\u0026group_id=122682"
},
{
"name": "22402",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22402"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-0314",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "PDFdirectory before 1.0 stores sensitive data in plaintext, which allows remote attackers to obtain arbitrary users\u0027 passwords by direct queries to the database, possibly via one of the SQL injection vulnerabilities."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://sourceforge.net/project/shownotes.php?release_id=382411\u0026group_id=122682",
"refsource": "CONFIRM",
"url": "http://sourceforge.net/project/shownotes.php?release_id=382411\u0026group_id=122682"
},
{
"name": "22402",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22402"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-0314",
"datePublished": "2006-01-19T01:00:00.000Z",
"dateReserved": "2006-01-19T00:00:00.000Z",
"dateUpdated": "2024-09-16T22:44:57.917Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}