high7.5
CVE-2006-1051
SQL injection vulnerability in Akarru Social BookMarking Engine before 0.4.3.4 allows remote attackers to execute arbitrary SQL commands via unknown attack vec…
Impact
SQL injection vulnerability in Akarru Social BookMarking Engine before 0.4.3.4 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors, possibly involving the username parameter to akarru.lib/users.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Akarru | Social Bookmarking Engine | Versions 0.4.3.2, 0.4.3.3 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/19112
- http://sourceforge.net/project/shownotes.php?release_id=398713&group_id=155783
- http://www.securityfocus.com/bid/16989
- http://www.vupen.com/english/advisories/2006/0841
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25115
- http://secunia.com/advisories/19112
- http://sourceforge.net/project/shownotes.php?release_id=398713&group_id=155783
- http://www.securityfocus.com/bid/16989
- http://www.vupen.com/english/advisories/2006/0841
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25115