CVE-2006-1773

SQL injection vulnerability in include.php in PHPKIT 1.6.1 Release 2 and earlier allows remote attackers to execute arbitrary SQL commands via the contentid parameter, possibly involving content/news.php.
Configurations

Configuration 1 (hide)

cpe:2.3:a:phpkit:phpkit:*:rc2:*:*:*:*:*:*

History

21 Nov 2024, 00:09

Type Values Removed Values Added
References () http://securitytracker.com/id?1015888 - Exploit () http://securitytracker.com/id?1015888 - Exploit
References () http://www.hamid.ir/security/phpkit.txt - () http://www.hamid.ir/security/phpkit.txt -
References () http://www.securityfocus.com/bid/17467 - Exploit () http://www.securityfocus.com/bid/17467 - Exploit
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/25743 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/25743 -

Information

Published : 2006-04-13 10:02

Updated : 2024-11-21 00:09


NVD link : CVE-2006-1773

Mitre link : CVE-2006-1773

CVE.ORG link : CVE-2006-1773


JSON object : View

Products Affected

phpkit

  • phpkit