vulnwire
7.5high

CVE-2006-0146in critical feed1 exploit

The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) C…

Published 20 y ago · modified 4 mo ago · JSON

CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
13.2%
percentile 96%
Public exploits
1
Exploit-DB

The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PHPOpenChat, (7) MAXdev MD-Pro, and (8) MediaBeez, when the MySQL root password is empty, allows remote attackers to execute arbitrary SQL commands via the sql parameter.

Exploit prediction (EPSS)

13.24% probability of exploitation in the next 30 days, higher than 96% of all scored CVEs.

Exploits and detections

  • EDB-1663 Simplog 0.9.2 - 's' Remote Command Execution · webapps · 2006-04-11

CVSS scores

Assigned byVersionScoreVector
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

Classification

Weakness
  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command

References

  • secunia.com /advisories/19590 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/18267 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/18254 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/19555 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • debian.org /security/2006/dsa-1029 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • securityfocus.com /archive/1/430448/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • maxdev.com /Article550.phtml · x_refsource_CONFIRM, x_transferred
  • vupen.com /english/advisories/2006/0105 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/19699 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • debian.org /security/2006/dsa-1030 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • vupen.com /english/advisories/2006/1305 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/24954 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/18276 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securityreason.com /securityalert/713 · third-party-advisory, x_refsource_SREASON, x_transferred
  • vupen.com /english/advisories/2006/1304 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/19600 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securityfocus.com /archive/1/466171/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • vupen.com /english/advisories/2006/0103 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /secunia_research/2005-64/advisory/ · x_refsource_MISC, x_transferred
  • securityfocus.com /bid/16187 · vdb-entry, x_refsource_BID, x_transferred
  • secunia.com /advisories/18720 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vupen.com /english/advisories/2006/1419 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/19591 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vupen.com /english/advisories/2006/0447 · vdb-entry, x_refsource_VUPEN, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/24051 · vdb-entry, x_refsource_XF, x_transferred
  • secunia.com /advisories/17418 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • xaraya.com /index.php/news/569 · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/19691 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vupen.com /english/advisories/2006/0102 · vdb-entry, x_refsource_VUPEN, x_transferred
  • vupen.com /english/advisories/2006/0101 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/18233 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • osvdb.org /22290 · vdb-entry, x_refsource_OSVDB, x_transferred
  • vupen.com /english/advisories/2006/0370 · vdb-entry, x_refsource_VUPEN, x_transferred
  • debian.org /security/2006/dsa-1031 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • retrogod.altervista.org /phpopenchat_30x_sql_xpl.html · x_refsource_MISC, x_transferred
  • securityfocus.com /archive/1/423784/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • vupen.com /english/advisories/2006/0104 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/18260 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • gentoo.org /security/en/glsa/glsa-200604-07.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
  • secunia.com /advisories/19563 · third-party-advisory, x_refsource_SECUNIA, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.