CVE-2006-5236

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• 4Images 1.7.1 - SQL Injection2009-12-20 · webapps · php · Verified
• 4Images 1.7.x - 'search.php' SQL Injection2006-10-08 · webapps · php · Verified

Impact

SQL injection vulnerability in search.php in 4images 1.7.x allows remote authenticated users to execute arbitrary SQL commands via the search_user parameter.

Affected products

References

• NVD record
• CVE.org record
• http://secunia.com/advisories/22349
• http://securityreason.com/securityalert/1711
• http://securitytracker.com/id?1017074
• http://w4ck1ng.com/board/showthread.php?t=1037
• http://www.securityfocus.com/archive/1/448022/100/0/threaded
• http://www.securityfocus.com/bid/20394
• http://www.vupen.com/english/advisories/2006/3974
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29389
• https://www.exploit-db.com/exploits/2487
• http://secunia.com/advisories/22349
• http://securityreason.com/securityalert/1711
• http://securitytracker.com/id?1017074
• http://w4ck1ng.com/board/showthread.php?t=1037
• http://www.securityfocus.com/archive/1/448022/100/0/threaded
• http://www.securityfocus.com/bid/20394
• http://www.vupen.com/english/advisories/2006/3974
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29389
• https://www.exploit-db.com/exploits/2487