CVE-2006-0159

SQL injection vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to execute arbitrary SQL commands via the email parameter. NOTE: the provenance of this information is unknown, although it may be based on post-disclosure analysis of CVE-2006-0110; the details are obtained solely from third party information.
Configurations

Configuration 1 (hide)

cpe:2.3:a:javier_suarez_sanz:foro_domus:2.10:*:*:*:*:*:*:*

History

21 Nov 2024, 00:05

Type Values Removed Values Added
References () http://secunia.com/advisories/18327 - Vendor Advisory () http://secunia.com/advisories/18327 - Vendor Advisory
References () http://www.osvdb.org/22264 - () http://www.osvdb.org/22264 -
References () http://www.vupen.com/english/advisories/2006/0073 - () http://www.vupen.com/english/advisories/2006/0073 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/24017 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/24017 -

Information

Published : 2006-01-10 11:03

Updated : 2025-04-03 01:03


NVD link : CVE-2006-0159

Mitre link : CVE-2006-0159

CVE.ORG link : CVE-2006-0159


JSON object : View

Products Affected

javier_suarez_sanz

  • foro_domus
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')