high7.5
CVE-2006-0729
SQL injection vulnerability in functions.php in Teca Diary PE 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) yy, (2) mm, and (3) dd …
Impact
SQL injection vulnerability in functions.php in Teca Diary PE 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) yy, (2) mm, and (3) dd parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Teca Scripts | Teca Diary | Version personal_1.0 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/18876
- http://securityreason.com/securityalert/477
- http://securitytracker.com/id?1015674
- http://www.evuln.com/vulns/75/summary.html
- http://www.securityfocus.com/archive/1/425892/30/6800/threaded
- http://www.securityfocus.com/bid/16686
- http://www.vupen.com/english/advisories/2006/0615
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24643
- http://secunia.com/advisories/18876
- http://securityreason.com/securityalert/477
- http://securitytracker.com/id?1015674
- http://www.evuln.com/vulns/75/summary.html
- http://www.securityfocus.com/archive/1/425892/30/6800/threaded
- http://www.securityfocus.com/bid/16686
- http://www.vupen.com/english/advisories/2006/0615
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24643