high7.5
CVE-2006-3239
SQL injection vulnerability in message.php in VBZooM 1.11 and earlier allows remote attackers to execute arbitrary SQL commands via the UserID parameter.
Impact
SQL injection vulnerability in message.php in VBZooM 1.11 and earlier allows remote attackers to execute arbitrary SQL commands via the UserID parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vbzoom | Vbzoom | Versions 1.00, 1.01, 1.11 |
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/1148
- http://www.securityfocus.com/archive/1/437655
- http://www.securityfocus.com/bid/18497
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27295
- http://securityreason.com/securityalert/1148
- http://www.securityfocus.com/archive/1/437655
- http://www.securityfocus.com/bid/18497
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27295