Vulnerabilities > CVE-2006-0462 - SQL Injection vulnerability in Andonet Blog 2004.09.02

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
andonet
exploit available
NVD
Published: 2006-01-27
Updated: 2017-07-20

Summary

SQL injection vulnerability in comentarios.php in AndoNET Blog 2004.09.02 allows remote attackers to execute arbitrary SQL commands via the entrada parameter.

Vulnerable Configurations

Part Description Count
Application
Andonet
1

Exploit-Db

descriptionAndoNET Blog 2004.9.2 Comentarios.PHP SQL Injection Vulnerability. CVE-2006-0462. Webapps exploit for php platform
idEDB-ID:27138
last seen2016-02-03
modified2006-01-26
published2006-01-26
reporterAliaksandr Hartsuyeu
sourcehttps://www.exploit-db.com/download/27138/
titleAndoNET Blog 2004.9.2 Comentarios.PHP SQL Injection Vulnerability

References