Vulnerabilities > CVE-2006-0809 - Input Validation vulnerability in Skate Board Skate Board 0.9
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
Multiple SQL injection vulnerabilities in Skate Board 0.9 allow remote attackers to execute arbitrary SQL commands via the (1) usern parameter in (a) sendpass.php, and the (2) usern and (3) passwd parameters and (4) sf_cookie cookie in (b) login.php and (c) logged.php.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Packetstorm
| data source | https://packetstormsecurity.com/files/download/44361/EV0084.txt |
| id | PACKETSTORM:44361 |
| last seen | 2016-12-05 |
| published | 2006-03-06 |
| reporter | Aliaksandr Hartsuyeu |
| source | https://packetstormsecurity.com/files/44361/EV0084.txt.html |
| title | EV0084.txt |
References
- http://evuln.com/vulns/84/summary.html
- http://secunia.com/advisories/18978
- http://securityreason.com/securityalert/540
- http://www.osvdb.org/23301
- http://www.osvdb.org/23302
- http://www.osvdb.org/23303
- http://www.securityfocus.com/archive/1/426658/30/0/threaded
- http://www.securityfocus.com/bid/16936
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24778
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24779