CVE-2006-1585

MEDIUM 6.4CVE-2006-1585 · Published 02/04/2006 · updated 16/06/2026

In short

CVE-2006-1585 is a MEDIUM (CVSS 6.4) vulnerability affecting monalbum (3dsrc).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
monalbum 3dsrc	`= 0.8.7`	No fix yet

Description

Multiple SQL injection vulnerabilities in MonAlbum 0.8.7 allow remote attackers to execute arbitrary SQL commands via (1) the pc parameter in (a) index.php and (2) pnom, (3) pcourriel, and (4) pcommentaire parameters in (b) image_agrandir.php.

References

secunia.com/advisories/19503
securityreason.com/securityalert/660
bash-x.net/undef/adv/monalbum.html · URL Repurposed
securityfocus.com/archive/1/429475/100/0/threaded
securityfocus.com/bid/17327
vupen.com/english/advisories/2006/1206
exchange.xforce.ibmcloud.com/vulnerabilities/25572

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free