← Voltar para CVEs

CVE-2006-0570

N/A

Descricao

Multiple SQL injection vulnerabilities in phpstatus 1.0, when gpc_magic_quotes is disabled, allow remote attackers to execute arbitrary SQL commands and bypass authentication via (1) the username parameter in check.php and (2) unknown attack vectors in the administrative interface.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado2/7/2006

Ultima modificacao4/16/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

hinton_design:phpstatus

Referencias

http://evuln.com/vulns/61/summary.html(cve@mitre.org)

http://secunia.com/advisories/18791(cve@mitre.org)

http://securityreason.com/securityalert/427(cve@mitre.org)

http://www.securityfocus.com/archive/1/424842/100/0/threaded(cve@mitre.org)

http://www.securityfocus.com/bid/16587(cve@mitre.org)

http://www.vupen.com/english/advisories/2006/0450(cve@mitre.org)

http://evuln.com/vulns/61/summary.html(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/18791(af854a3a-2127-422b-91ae-364da2661108)

http://securityreason.com/securityalert/427(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/archive/1/424842/100/0/threaded(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/16587(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2006/0450(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.