cvelistv5 - CVE-2006-0410

CVE-2006-0410 (GCVE-0-2006-0410)

Vulnerability from cvelistv5 – Published: 2006-01-25 02:00 – Updated: 2024-08-07 16:34

Summary

SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors involving binary strings.

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://secunia.com/advisories/19590	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/19555	third-party-advisoryx_refsource_SECUNIA
	http://www.debian.org/security/2006/dsa-1029	vendor-advisoryx_refsource_DEBIAN
	http://www.vupen.com/english/advisories/2006/0448	vdb-entryx_refsource_VUPEN
	http://www.debian.org/security/2006/dsa-1030	vendor-advisoryx_refsource_DEBIAN
	http://www.vupen.com/english/advisories/2006/0315	vdb-entryx_refsource_VUPEN
	http://sourceforge.net/project/shownotes.php?rele…	x_refsource_CONFIRM
	http://secunia.com/advisories/18575	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/19591	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/18745	third-party-advisoryx_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
	http://secunia.com/advisories/19691	third-party-advisoryx_refsource_SECUNIA
	http://www.debian.org/security/2006/dsa-1031	vendor-advisoryx_refsource_DEBIAN
	http://www.osvdb.org/22705	vdb-entryx_refsource_OSVDB
	http://www.gentoo.org/security/en/glsa/glsa-20060…	vendor-advisoryx_refsource_GENTOO
	http://www.securityfocus.com/bid/16364	vdb-entryx_refsource_BID
	http://secunia.com/advisories/18732	third-party-advisoryx_refsource_SECUNIA
	http://www.gentoo.org/security/en/glsa/glsa-20060…	vendor-advisoryx_refsource_GENTOO

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T16:34:14.754Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "19590",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19590"
          },
          {
            "name": "19555",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19555"
          },
          {
            "name": "DSA-1029",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1029"
          },
          {
            "name": "ADV-2006-0448",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/0448"
          },
          {
            "name": "DSA-1030",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1030"
          },
          {
            "name": "ADV-2006-0315",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/0315"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://sourceforge.net/project/shownotes.php?release_id=387862\u0026group_id=42718"
          },
          {
            "name": "18575",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18575"
          },
          {
            "name": "19591",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19591"
          },
          {
            "name": "18745",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18745"
          },
          {
            "name": "adodb-postgresql-sql-injection(24314)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24314"
          },
          {
            "name": "19691",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19691"
          },
          {
            "name": "DSA-1031",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1031"
          },
          {
            "name": "22705",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/22705"
          },
          {
            "name": "GLSA-200604-07",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200604-07.xml"
          },
          {
            "name": "16364",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/16364"
          },
          {
            "name": "18732",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18732"
          },
          {
            "name": "GLSA-200602-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200602-02.xml"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-01-24T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors involving binary strings."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-19T15:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "19590",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19590"
        },
        {
          "name": "19555",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19555"
        },
        {
          "name": "DSA-1029",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1029"
        },
        {
          "name": "ADV-2006-0448",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/0448"
        },
        {
          "name": "DSA-1030",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1030"
        },
        {
          "name": "ADV-2006-0315",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/0315"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://sourceforge.net/project/shownotes.php?release_id=387862\u0026group_id=42718"
        },
        {
          "name": "18575",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18575"
        },
        {
          "name": "19591",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19591"
        },
        {
          "name": "18745",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18745"
        },
        {
          "name": "adodb-postgresql-sql-injection(24314)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24314"
        },
        {
          "name": "19691",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19691"
        },
        {
          "name": "DSA-1031",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1031"
        },
        {
          "name": "22705",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/22705"
        },
        {
          "name": "GLSA-200604-07",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200604-07.xml"
        },
        {
          "name": "16364",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/16364"
        },
        {
          "name": "18732",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18732"
        },
        {
          "name": "GLSA-200602-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200602-02.xml"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-0410",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors involving binary strings."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "19590",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19590"
            },
            {
              "name": "19555",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19555"
            },
            {
              "name": "DSA-1029",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1029"
            },
            {
              "name": "ADV-2006-0448",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/0448"
            },
            {
              "name": "DSA-1030",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1030"
            },
            {
              "name": "ADV-2006-0315",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/0315"
            },
            {
              "name": "http://sourceforge.net/project/shownotes.php?release_id=387862\u0026group_id=42718",
              "refsource": "CONFIRM",
              "url": "http://sourceforge.net/project/shownotes.php?release_id=387862\u0026group_id=42718"
            },
            {
              "name": "18575",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18575"
            },
            {
              "name": "19591",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19591"
            },
            {
              "name": "18745",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18745"
            },
            {
              "name": "adodb-postgresql-sql-injection(24314)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24314"
            },
            {
              "name": "19691",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19691"
            },
            {
              "name": "DSA-1031",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1031"
            },
            {
              "name": "22705",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/22705"
            },
            {
              "name": "GLSA-200604-07",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200604-07.xml"
            },
            {
              "name": "16364",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/16364"
            },
            {
              "name": "18732",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18732"
            },
            {
              "name": "GLSA-200602-02",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200602-02.xml"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-0410",
    "datePublished": "2006-01-25T02:00:00",
    "dateReserved": "2006-01-25T00:00:00",
    "dateUpdated": "2024-08-07T16:34:14.754Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:john_lim:adodb:4.66:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9F76566C-7F49-4725-91E6-8E2416CB7F03\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:john_lim:adodb:4.68:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"02F0F5B5-86D2-48C4-872E-3F8C38AF563C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:john_lim:adodb:4.70:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7F1503DB-7F84-4F33-8357-7D877529F15C\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors involving binary strings.\"}, {\"lang\": \"es\", \"value\": \"Vulnerabilidad de inyecci\\u00f3n de SQL en ADOdb anteriores a 4.71, cuando se usa PostgreSQL, permite a atacantes ejecutar \\u00f3rdenes SQL de su elecci\\u00f3n mediante vectores de ataque no especificados implicando cadenas binarias.\"}]",
      "id": "CVE-2006-0410",
      "lastModified": "2024-11-21T00:06:23.923",
      "metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:N/I:P/A:N\", \"baseScore\": 5.0, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"NONE\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 10.0, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
      "published": "2006-01-25T02:03:00.000",
      "references": "[{\"url\": \"http://secunia.com/advisories/18575\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/18732\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/18745\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/19555\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/19590\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/19591\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/19691\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://sourceforge.net/project/shownotes.php?release_id=387862\u0026group_id=42718\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\"]}, {\"url\": \"http://www.debian.org/security/2006/dsa-1029\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.debian.org/security/2006/dsa-1030\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.debian.org/security/2006/dsa-1031\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.gentoo.org/security/en/glsa/glsa-200602-02.xml\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.gentoo.org/security/en/glsa/glsa-200604-07.xml\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.osvdb.org/22705\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.securityfocus.com/bid/16364\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.vupen.com/english/advisories/2006/0315\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.vupen.com/english/advisories/2006/0448\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/24314\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/18575\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/18732\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/18745\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/19555\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/19590\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/19591\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/19691\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://sourceforge.net/project/shownotes.php?release_id=387862\u0026group_id=42718\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"http://www.debian.org/security/2006/dsa-1029\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.debian.org/security/2006/dsa-1030\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.debian.org/security/2006/dsa-1031\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.gentoo.org/security/en/glsa/glsa-200602-02.xml\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.gentoo.org/security/en/glsa/glsa-200604-07.xml\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.osvdb.org/22705\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/bid/16364\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.vupen.com/english/advisories/2006/0315\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.vupen.com/english/advisories/2006/0448\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/24314\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "cve@mitre.org",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-Other\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2006-0410\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2006-01-25T02:03:00.000\",\"lastModified\":\"2025-04-03T01:03:51.193\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors involving binary strings.\"},{\"lang\":\"es\",\"value\":\"Vulnerabilidad de inyecci\u00f3n de SQL en ADOdb anteriores a 4.71, cuando se usa PostgreSQL, permite a atacantes ejecutar \u00f3rdenes SQL de su elecci\u00f3n mediante vectores de ataque no especificados implicando cadenas binarias.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:P/A:N\",\"baseScore\":5.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-Other\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:john_lim:adodb:4.66:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9F76566C-7F49-4725-91E6-8E2416CB7F03\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:john_lim:adodb:4.68:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"02F0F5B5-86D2-48C4-872E-3F8C38AF563C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:john_lim:adodb:4.70:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F1503DB-7F84-4F33-8357-7D877529F15C\"}]}]}],\"references\":[{\"url\":\"http://secunia.com/advisories/18575\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/18732\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/18745\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/19555\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/19590\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/19591\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/19691\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://sourceforge.net/project/shownotes.php?release_id=387862\u0026group_id=42718\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"http://www.debian.org/security/2006/dsa-1029\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.debian.org/security/2006/dsa-1030\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.debian.org/security/2006/dsa-1031\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.gentoo.org/security/en/glsa/glsa-200602-02.xml\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.gentoo.org/security/en/glsa/glsa-200604-07.xml\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.osvdb.org/22705\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/16364\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.vupen.com/english/advisories/2006/0315\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.vupen.com/english/advisories/2006/0448\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/24314\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/18575\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/18732\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/18745\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/19555\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/19590\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/19591\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/19691\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://sourceforge.net/project/shownotes.php?release_id=387862\u0026group_id=42718\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"http://www.debian.org/security/2006/dsa-1029\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.debian.org/security/2006/dsa-1030\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.debian.org/security/2006/dsa-1031\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.gentoo.org/security/en/glsa/glsa-200602-02.xml\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.gentoo.org/security/en/glsa/glsa-200604-07.xml\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.osvdb.org/22705\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/16364\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.vupen.com/english/advisories/2006/0315\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.vupen.com/english/advisories/2006/0448\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/24314\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
  }
}

CERTA-2006-AVI-145

Vulnerability from certfr_avis - Published: - Updated:

None

Description

CACTI est un outil de supervision réseau.

Plusieurs vulnérabilités présentes sur CACTI peuvent être utilisées par un utilisateur mal intrentionné pour réaliser une attaque de type « cross site scripting », réaliser une attaque par injection SQL ou exécuter du code arbitraire à distance.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

CACTI versions antérieures à la version 0.8.6.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

Tags

Bulletin de sécurité Gentoo GLSA 200604-07/Cacti du 14 avril 2006 :	-	other
Bulletin de sécurité Debian DSA 1031 du 08 avril 2006 :	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cp\u003eCACTI versions ant\u00e9rieures \u00e0 la version  0.8.6.\u003c/p\u003e",
  "content": "## Description\n\nCACTI est un outil de supervision r\u00e9seau.\n\nPlusieurs vuln\u00e9rabilit\u00e9s pr\u00e9sentes sur CACTI peuvent \u00eatre utilis\u00e9es par\nun utilisateur mal intrentionn\u00e9 pour r\u00e9aliser une attaque de type \u00ab\ncross site scripting \u00bb, r\u00e9aliser une attaque par injection SQL ou\nex\u00e9cuter du code arbitraire \u00e0 distance.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2006-0146",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-0146"
    },
    {
      "name": "CVE-2006-0147",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-0147"
    },
    {
      "name": "CVE-2006-0410",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-0410"
    },
    {
      "name": "CVE-2006-0806",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-0806"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Gentoo GLSA 200604-07/Cacti du 14    avril 2006 :",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200604-07.xml"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Debian DSA 1031 du 08 avril 2006 :",
      "url": "http://www.debian.org/security/2006/dsa-1031"
    }
  ],
  "reference": "CERTA-2006-AVI-145",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2006-04-10T00:00:00.000000"
    },
    {
      "description": "ajout de la r\u00e9f\u00e9rence au bulletin de s\u00e9curit\u00e9 Gentoo GLSA 200604-07.",
      "revision_date": "2006-04-20T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "Attaque de type \u00ab cross site scripting \u00bb"
    }
  ],
  "summary": null,
  "title": "Vuln\u00e9rabilit\u00e9s sur CACTI",
  "vendor_advisories": []
}

CERTA-2006-AVI-145

Vulnerability from certfr_avis - Published: - Updated:

None

Description

CACTI est un outil de supervision réseau.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

CACTI versions antérieures à la version 0.8.6.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

Tags

Bulletin de sécurité Gentoo GLSA 200604-07/Cacti du 14 avril 2006 :	-	other
Bulletin de sécurité Debian DSA 1031 du 08 avril 2006 :	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cp\u003eCACTI versions ant\u00e9rieures \u00e0 la version  0.8.6.\u003c/p\u003e",
  "content": "## Description\n\nCACTI est un outil de supervision r\u00e9seau.\n\nPlusieurs vuln\u00e9rabilit\u00e9s pr\u00e9sentes sur CACTI peuvent \u00eatre utilis\u00e9es par\nun utilisateur mal intrentionn\u00e9 pour r\u00e9aliser une attaque de type \u00ab\ncross site scripting \u00bb, r\u00e9aliser une attaque par injection SQL ou\nex\u00e9cuter du code arbitraire \u00e0 distance.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2006-0146",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-0146"
    },
    {
      "name": "CVE-2006-0147",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-0147"
    },
    {
      "name": "CVE-2006-0410",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-0410"
    },
    {
      "name": "CVE-2006-0806",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-0806"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Gentoo GLSA 200604-07/Cacti du 14    avril 2006 :",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200604-07.xml"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Debian DSA 1031 du 08 avril 2006 :",
      "url": "http://www.debian.org/security/2006/dsa-1031"
    }
  ],
  "reference": "CERTA-2006-AVI-145",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2006-04-10T00:00:00.000000"
    },
    {
      "description": "ajout de la r\u00e9f\u00e9rence au bulletin de s\u00e9curit\u00e9 Gentoo GLSA 200604-07.",
      "revision_date": "2006-04-20T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "Attaque de type \u00ab cross site scripting \u00bb"
    }
  ],
  "summary": null,
  "title": "Vuln\u00e9rabilit\u00e9s sur CACTI",
  "vendor_advisories": []
}

FKIE_CVE-2006-0410

Vulnerability from fkie_nvd - Published: 2006-01-25 02:03 - Updated: 2025-04-03 01:03

Severity ?

Summary

SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors involving binary strings.

References

URL	Tags
cve@mitre.org	http://secunia.com/advisories/18575	Patch, Vendor Advisory
cve@mitre.org	http://secunia.com/advisories/18732
cve@mitre.org	http://secunia.com/advisories/18745
cve@mitre.org	http://secunia.com/advisories/19555
cve@mitre.org	http://secunia.com/advisories/19590
cve@mitre.org	http://secunia.com/advisories/19591
cve@mitre.org	http://secunia.com/advisories/19691
cve@mitre.org	http://sourceforge.net/project/shownotes.php?release_id=387862&group_id=42718	Patch
cve@mitre.org	http://www.debian.org/security/2006/dsa-1029
cve@mitre.org	http://www.debian.org/security/2006/dsa-1030
cve@mitre.org	http://www.debian.org/security/2006/dsa-1031
cve@mitre.org	http://www.gentoo.org/security/en/glsa/glsa-200602-02.xml
cve@mitre.org	http://www.gentoo.org/security/en/glsa/glsa-200604-07.xml
cve@mitre.org	http://www.osvdb.org/22705
cve@mitre.org	http://www.securityfocus.com/bid/16364
cve@mitre.org	http://www.vupen.com/english/advisories/2006/0315
cve@mitre.org	http://www.vupen.com/english/advisories/2006/0448
cve@mitre.org	https://exchange.xforce.ibmcloud.com/vulnerabilities/24314
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/18575	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/18732
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/18745
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/19555
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/19590
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/19591
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/19691
af854a3a-2127-422b-91ae-364da2661108	http://sourceforge.net/project/shownotes.php?release_id=387862&group_id=42718	Patch
af854a3a-2127-422b-91ae-364da2661108	http://www.debian.org/security/2006/dsa-1029
af854a3a-2127-422b-91ae-364da2661108	http://www.debian.org/security/2006/dsa-1030
af854a3a-2127-422b-91ae-364da2661108	http://www.debian.org/security/2006/dsa-1031
af854a3a-2127-422b-91ae-364da2661108	http://www.gentoo.org/security/en/glsa/glsa-200602-02.xml
af854a3a-2127-422b-91ae-364da2661108	http://www.gentoo.org/security/en/glsa/glsa-200604-07.xml
af854a3a-2127-422b-91ae-364da2661108	http://www.osvdb.org/22705
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/16364
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2006/0315
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2006/0448
af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/24314

Impacted products

Vendor	Product	Version
john_lim	adodb	4.66
john_lim	adodb	4.68
john_lim	adodb	4.70

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:john_lim:adodb:4.66:*:*:*:*:*:*:*",
              "matchCriteriaId": "9F76566C-7F49-4725-91E6-8E2416CB7F03",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:john_lim:adodb:4.68:*:*:*:*:*:*:*",
              "matchCriteriaId": "02F0F5B5-86D2-48C4-872E-3F8C38AF563C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:john_lim:adodb:4.70:*:*:*:*:*:*:*",
              "matchCriteriaId": "7F1503DB-7F84-4F33-8357-7D877529F15C",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors involving binary strings."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de inyecci\u00f3n de SQL en ADOdb anteriores a 4.71, cuando se usa PostgreSQL, permite a atacantes ejecutar \u00f3rdenes SQL de su elecci\u00f3n mediante vectores de ataque no especificados implicando cadenas binarias."
    }
  ],
  "id": "CVE-2006-0410",
  "lastModified": "2025-04-03T01:03:51.193",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 5.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2006-01-25T02:03:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/18575"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/18732"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/18745"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/19555"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/19590"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/19591"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/19691"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://sourceforge.net/project/shownotes.php?release_id=387862\u0026group_id=42718"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.debian.org/security/2006/dsa-1029"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.debian.org/security/2006/dsa-1030"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.debian.org/security/2006/dsa-1031"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200602-02.xml"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200604-07.xml"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/22705"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/16364"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2006/0315"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2006/0448"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24314"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/18575"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/18732"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/18745"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/19555"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/19590"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/19591"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/19691"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://sourceforge.net/project/shownotes.php?release_id=387862\u0026group_id=42718"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2006/dsa-1029"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2006/dsa-1030"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2006/dsa-1031"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200602-02.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200604-07.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/22705"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/16364"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2006/0315"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2006/0448"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24314"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-8Q7P-VWH5-65W4

Vulnerability from github – Published: 2022-05-01 06:39 – Updated: 2022-05-01 06:39

Details

SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors involving binary strings.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2006-0410"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2006-01-25T02:03:00Z",
    "severity": "MODERATE"
  },
  "details": "SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors involving binary strings.",
  "id": "GHSA-8q7p-vwh5-65w4",
  "modified": "2022-05-01T06:39:38Z",
  "published": "2022-05-01T06:39:38Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-0410"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24314"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/18575"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/18732"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/18745"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/19555"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/19590"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/19591"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/19691"
    },
    {
      "type": "WEB",
      "url": "http://sourceforge.net/project/shownotes.php?release_id=387862\u0026group_id=42718"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2006/dsa-1029"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2006/dsa-1030"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2006/dsa-1031"
    },
    {
      "type": "WEB",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200602-02.xml"
    },
    {
      "type": "WEB",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200604-07.xml"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/22705"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/16364"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2006/0315"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2006/0448"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2006-0410

Vulnerability from gsd - Updated: 2023-12-13 01:19

Details

SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors involving binary strings.

Aliases

CVE-2006-0410

Aliases

CVE-2006-0410

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2006-0410",
    "description": "SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors involving binary strings.",
    "id": "GSD-2006-0410",
    "references": [
      "https://www.suse.com/security/cve/CVE-2006-0410.html",
      "https://www.debian.org/security/2006/dsa-1029",
      "https://www.debian.org/security/2006/dsa-1030",
      "https://www.debian.org/security/2006/dsa-1031"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2006-0410"
      ],
      "details": "SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors involving binary strings.",
      "id": "GSD-2006-0410",
      "modified": "2023-12-13T01:19:50.376411Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2006-0410",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors involving binary strings."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "19590",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/19590"
          },
          {
            "name": "19555",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/19555"
          },
          {
            "name": "DSA-1029",
            "refsource": "DEBIAN",
            "url": "http://www.debian.org/security/2006/dsa-1029"
          },
          {
            "name": "ADV-2006-0448",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2006/0448"
          },
          {
            "name": "DSA-1030",
            "refsource": "DEBIAN",
            "url": "http://www.debian.org/security/2006/dsa-1030"
          },
          {
            "name": "ADV-2006-0315",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2006/0315"
          },
          {
            "name": "http://sourceforge.net/project/shownotes.php?release_id=387862\u0026group_id=42718",
            "refsource": "CONFIRM",
            "url": "http://sourceforge.net/project/shownotes.php?release_id=387862\u0026group_id=42718"
          },
          {
            "name": "18575",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/18575"
          },
          {
            "name": "19591",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/19591"
          },
          {
            "name": "18745",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/18745"
          },
          {
            "name": "adodb-postgresql-sql-injection(24314)",
            "refsource": "XF",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24314"
          },
          {
            "name": "19691",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/19691"
          },
          {
            "name": "DSA-1031",
            "refsource": "DEBIAN",
            "url": "http://www.debian.org/security/2006/dsa-1031"
          },
          {
            "name": "22705",
            "refsource": "OSVDB",
            "url": "http://www.osvdb.org/22705"
          },
          {
            "name": "GLSA-200604-07",
            "refsource": "GENTOO",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200604-07.xml"
          },
          {
            "name": "16364",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/16364"
          },
          {
            "name": "18732",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/18732"
          },
          {
            "name": "GLSA-200602-02",
            "refsource": "GENTOO",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200602-02.xml"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:john_lim:adodb:4.66:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:john_lim:adodb:4.68:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:john_lim:adodb:4.70:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-0410"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors involving binary strings."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-Other"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://sourceforge.net/project/shownotes.php?release_id=387862\u0026group_id=42718",
              "refsource": "CONFIRM",
              "tags": [
                "Patch"
              ],
              "url": "http://sourceforge.net/project/shownotes.php?release_id=387862\u0026group_id=42718"
            },
            {
              "name": "16364",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/16364"
            },
            {
              "name": "18575",
              "refsource": "SECUNIA",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/18575"
            },
            {
              "name": "22705",
              "refsource": "OSVDB",
              "tags": [],
              "url": "http://www.osvdb.org/22705"
            },
            {
              "name": "GLSA-200602-02",
              "refsource": "GENTOO",
              "tags": [],
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200602-02.xml"
            },
            {
              "name": "18732",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/18732"
            },
            {
              "name": "18745",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/18745"
            },
            {
              "name": "DSA-1029",
              "refsource": "DEBIAN",
              "tags": [],
              "url": "http://www.debian.org/security/2006/dsa-1029"
            },
            {
              "name": "DSA-1030",
              "refsource": "DEBIAN",
              "tags": [],
              "url": "http://www.debian.org/security/2006/dsa-1030"
            },
            {
              "name": "DSA-1031",
              "refsource": "DEBIAN",
              "tags": [],
              "url": "http://www.debian.org/security/2006/dsa-1031"
            },
            {
              "name": "19555",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/19555"
            },
            {
              "name": "19590",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/19590"
            },
            {
              "name": "19591",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/19591"
            },
            {
              "name": "GLSA-200604-07",
              "refsource": "GENTOO",
              "tags": [],
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200604-07.xml"
            },
            {
              "name": "19691",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/19691"
            },
            {
              "name": "ADV-2006-0448",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2006/0448"
            },
            {
              "name": "ADV-2006-0315",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2006/0315"
            },
            {
              "name": "adodb-postgresql-sql-injection(24314)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24314"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2017-07-20T01:29Z",
      "publishedDate": "2006-01-25T02:03Z"
    }
  }
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2006-0410 (GCVE-0-2006-0410)

CERTA-2006-AVI-145

Description

Solution

CERTA-2006-AVI-145

Description

Solution

FKIE_CVE-2006-0410

GHSA-8Q7P-VWH5-65W4

GSD-2006-0410

Tags

Sightings

Nomenclature