high7.5
CVE-2006-3048
SQL injection vulnerability in TikiWiki 1.9.3.2 and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via unknown attack vect…
Impact
SQL injection vulnerability in TikiWiki 1.9.3.2 and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via unknown attack vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tiki | Tikiwiki Cms\/Groupware | through 1.9.3.1 Versions 1.9.0, 1.9.1, 1.9.2, 1.9.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/20648
- http://secunia.com/advisories/20850
- http://securityreason.com/securityalert/1102
- http://www.gentoo.org/security/en/glsa/glsa-200606-29.xml
- http://www.securityfocus.com/archive/1/437017/100/0/threaded
- http://www.securityfocus.com/bid/18421
- http://www.vupen.com/english/advisories/2006/2349
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27146
- http://secunia.com/advisories/20648
- http://secunia.com/advisories/20850
- http://securityreason.com/securityalert/1102
- http://www.gentoo.org/security/en/glsa/glsa-200606-29.xml
- http://www.securityfocus.com/archive/1/437017/100/0/threaded
- http://www.securityfocus.com/bid/18421
- http://www.vupen.com/english/advisories/2006/2349
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27146