Vulnerabilities > CVE-2006-0608 - Input Validation And Authentication Bypass vulnerability in Hinton Design PHPhd 1.0

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
hinton-design
NVD
Published: 2006-02-08
Updated: 2018-10-19

Summary

Multiple SQL injection vulnerabilities in Hinton Design phphd 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the username parameter to check.php or (2) unknown attack vectors to scripts that display information from the database.

Vulnerable Configurations

Part Description Count
Application
Hinton_Design
1

Packetstorm

data sourcehttps://packetstormsecurity.com/files/download/43801/EV0060.txt
idPACKETSTORM:43801
last seen2016-12-05
published2006-02-14
reporterAliaksandr Hartsuyeu
sourcehttps://packetstormsecurity.com/files/43801/EV0060.txt.html
titleEV0060.txt

References