Vulnerabilities > CVE-2006-5926 - SQL Injection vulnerability in Vallheru 1.0.6

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
vallheru
NVD
Published: 2006-11-16
Updated: 2017-07-20

Summary

Multiple SQL injection vulnerabilities in mail.php in Vallheru before 1.0.7 allow remote attackers to execute arbitrary SQL commands via the (1) id or (2) to parameters. NOTE: some of these details are obtained from third party information.

Vulnerable Configurations

Part Description Count
Application
Vallheru
1

References