Vulnerabilities > CVE-2006-3115 - SQL-Injection vulnerability in Spiffyjr PHPraid 3.0.4

047910
CVSS 5.1 - MEDIUM
Attack vector
NETWORK
Attack complexity
HIGH
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
high complexity
spiffyjr

Summary

SQL injection vulnerability in view.php in phpRaid 3.0.4, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the raid_id parameter.

Vulnerable Configurations

Part Description Count
Application
Spiffyjr
1