high7.5Public exploit code
CVE-2006-4961
SQL injection vulnerability in the GetModuleConfig function in public_includes/pub_kernel/pbd_modules.php in Php Blue Dragon 2.9.1 and earlier allows remote at…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHP Blue Dragon CMS 2.9.1 - Cross-Site Scripting / SQL Injection Code Execution2006-09-20 · webapps · php · Verified
Impact
SQL injection vulnerability in the GetModuleConfig function in public_includes/pub_kernel/pbd_modules.php in Php Blue Dragon 2.9.1 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter to index.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Blue Dragon | Php Blue Dragon | Versions platinum_2.8.0, platinum_2.9.1 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/22031
- http://www.securityfocus.com/bid/20123
- http://www.vupen.com/english/advisories/2006/3736
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29051
- https://www.exploit-db.com/exploits/2402
- http://secunia.com/advisories/22031
- http://www.securityfocus.com/bid/20123
- http://www.vupen.com/english/advisories/2006/3736
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29051
- https://www.exploit-db.com/exploits/2402