high7.5
CVE-2006-3691
Multiple SQL injection vulnerabilities in VBZooM 1.11 and earlier allow remote attackers to execute arbitrary SQL commands via the UserID parameter to (1) igno…
Impact
Multiple SQL injection vulnerabilities in VBZooM 1.11 and earlier allow remote attackers to execute arbitrary SQL commands via the UserID parameter to (1) ignore-pm.php, (2) sendmail.php, (3) reply.php or (4) sub-join.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vbzoom | Vbzoom | through 1.11 |
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/1244
- http://www.osvdb.org/28254
- http://www.securityfocus.com/archive/1/440114/100/0/threaded
- http://www.securityfocus.com/archive/1/440133/100/0/threaded
- http://www.securityfocus.com/archive/1/440141/100/0/threaded
- http://www.securityfocus.com/archive/1/440145/100/0/threaded
- http://www.securityfocus.com/archive/1/491770/100/0/threaded
- http://www.securityfocus.com/bid/18937
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42254
- http://securityreason.com/securityalert/1244
- http://www.osvdb.org/28254
- http://www.securityfocus.com/archive/1/440114/100/0/threaded
- http://www.securityfocus.com/archive/1/440133/100/0/threaded
- http://www.securityfocus.com/archive/1/440141/100/0/threaded
- http://www.securityfocus.com/archive/1/440145/100/0/threaded
- http://www.securityfocus.com/archive/1/491770/100/0/threaded
- http://www.securityfocus.com/bid/18937
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42254