CVE-2006-6872

Description

References

• secunia.com/advisories/23502 · Vendor Advisory
• securityfocus.com/bid/21333 · Exploit
• vupen.com/english/advisories/2006/5187
• exchange.xforce.ibmcloud.com/vulnerabilities/31117
• exploit-db.com/exploits/3004

endonesia의 다른 취약점

• CVE-2023-31753심각 9.8SQL injection vulnerability in diskusi.php in eNdonesia 8.7, allows an attacker to execute arbitrary SQL commands via the "rid=" parameter.
• CVE-2010-3461높음 7.5SQL injection vulnerability in the Publisher module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL commands via the artid…
• CVE-2008-3452보통 6.8SQL injection vulnerability in the Calendar module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL commands via the loc_id…
• CVE-2007-3394높음 7.5Multiple SQL injection vulnerabilities in eNdonesia 8.4 allow remote attackers to execute arbitrary SQL commands via the (1) artid parameter…
• CVE-2006-6874보통 6.8Multiple cross-site scripting (XSS) vulnerabilities in friend.php in eNdonesia 8.4 allow remote attackers to inject arbitrary web script or …