Vulnerabilities > CVE-2006-6873 - Scripts Multiple Input Validation vulnerability in Endonesia 8.4

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
endonesia
exploit available
NVD
Published: 2006-12-31
Updated: 2017-10-19

Summary

Multiple SQL injection vulnerabilities in mod.php in eNdonesia 8.4 allow remote attackers to execute arbitrary SQL commands via (1) the did parameter in a (a) viewdisk operation (diskusi mod), or the (2) cid parameter in a (b) viewlink (katalog mod) or (b) viewcat (diskusi mod) operation.

Vulnerable Configurations

Part Description Count
Application
Endonesia
1

Exploit-Db

descriptioneNdonesia 8.4 (mod.php/friend.php/admin.php) Multiple Vulnerabilities. CVE-2006-6871,CVE-2006-6872,CVE-2006-6873. Webapps exploit for php platform
fileexploits/php/webapps/3004.txt
idEDB-ID:3004
last seen2016-01-31
modified2006-12-25
platformphp
port
published2006-12-25
reporterz1ckX(ru)
sourcehttps://www.exploit-db.com/download/3004/
titleeNdonesia 8.4 mod.php/friend.php/admin.php Multiple Vulnerabilities
typewebapps

References