CVE-2006-0806

概要

参考情報

• phpesp.cvs.sourceforge.net/phpesp/phpESP/admin/include/lib/adodb/adodb-pager.inc.php
• secunia.com/advisories/18928 · Vendor Advisory
• secunia.com/advisories/19555 · Vendor Advisory
• secunia.com/advisories/19590 · Vendor Advisory
• secunia.com/advisories/19591 · Vendor Advisory
• secunia.com/advisories/19691 · Vendor Advisory
• securityreason.com/securityalert/452
• sourceforge.net/project/shownotes.php
• debian.org/security/2006/dsa-1029
• debian.org/security/2006/dsa-1030
• debian.org/security/2006/dsa-1031
• gentoo.org/security/en/glsa/glsa-200604-07.xml
• gulftech.org
• osvdb.org/23362

adodb のその他の脆弱性

• CVE-2011-3699中 5.0John Lim ADOdb Library for PHP 5.11 allows remote attackers to obtain sensitive information via a direct request to a .php file, which revea…
• CVE-2006-4618中 5.1PHP remote file inclusion vulnerability in adodb-postgres7.inc.php in John Lim ADOdb, possibly 4.01 and earlier, as used in Intechnic In-lin…
• CVE-2006-0410中 5.0SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspe…
• CVE-2006-0147高 7.5Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (…
• CVE-2006-0146高 7.5The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Ca…