CVE-2006-0692

Impact

Multiple SQL injection vulnerabilities in Carey Briggs PHP/MYSQL Timesheet 1 and 2 allow remote attackers to execute arbitrary SQL commands via the (1) yr, (2) month, (3) day, and (4) job parameters in (a) index.php and (b) changehrs.php.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://secunia.com/advisories/18822
• http://securityreason.com/securityalert/451
• http://www.evuln.com/vulns/67/summary.html
• http://www.securityfocus.com/archive/1/425316/100/0/threaded
• http://www.securityfocus.com/bid/16620
• http://www.vupen.com/english/advisories/2006/0522
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24567
• http://secunia.com/advisories/18822
• http://securityreason.com/securityalert/451
• http://www.evuln.com/vulns/67/summary.html
• http://www.securityfocus.com/archive/1/425316/100/0/threaded
• http://www.securityfocus.com/bid/16620
• http://www.vupen.com/english/advisories/2006/0522
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24567