Vulnerabilities > CVE-2006-0626 - SQL Injection vulnerability in Spip 1.8.2G

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
spip
exploit available
NVD
Published: 2006-02-09
Updated: 2017-07-20

Summary

SQL injection vulnerability in spip_acces_doc.php3 in SPIP 1.8.2g and earlier allows remote attackers to execute arbitrary SQL commands via the file parameter.

Vulnerable Configurations

Part Description Count
Application
Spip
1

Exploit-Db

descriptionSPIP <= 1.8.2g Remote Commands Execution Exploit. CVE-2006-0626. Webapps exploit for php platform
idEDB-ID:1482
last seen2016-01-31
modified2006-02-08
published2006-02-08
reporterrgod
sourcehttps://www.exploit-db.com/download/1482/
titleSPIP <= 1.8.2g Remote Commands Execution Exploit

References