CVE-2006-3996

N/A

Descricao

SQL injection vulnerability in links/index.php in ATutor 1.5.3.1 and earlier allows remote authenticated users to execute arbitrary SQL commands via the (1) desc or (2) asc parameters.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado8/5/2006

Ultima modificacao4/16/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

adaptive_technology_resource_centre:atutor

Referencias

http://atutor.ca/news.php#010806(cve@mitre.org)

http://retrogod.altervista.org/atutor_1531_sql.html(cve@mitre.org)

http://secunia.com/advisories/21308(cve@mitre.org)

http://securityreason.com/securityalert/1330(cve@mitre.org)

http://www.osvdb.org/27665(cve@mitre.org)

http://www.securityfocus.com/archive/1/441711/100/0/threaded(cve@mitre.org)

http://www.securityfocus.com/bid/19232(cve@mitre.org)

http://www.vupen.com/english/advisories/2006/3074(cve@mitre.org)

https://exchange.xforce.ibmcloud.com/vulnerabilities/28082(cve@mitre.org)

https://www.exploit-db.com/exploits/2088(cve@mitre.org)

http://atutor.ca/news.php#010806(af854a3a-2127-422b-91ae-364da2661108)

http://retrogod.altervista.org/atutor_1531_sql.html(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/21308(af854a3a-2127-422b-91ae-364da2661108)

http://securityreason.com/securityalert/1330(af854a3a-2127-422b-91ae-364da2661108)

http://www.osvdb.org/27665(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/archive/1/441711/100/0/threaded(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/19232(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2006/3074(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/28082(af854a3a-2127-422b-91ae-364da2661108)

https://www.exploit-db.com/exploits/2088(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.