Unscored CVE-2006-3666 EUVD-2006-3661GHSA-r7wh-jwcf-8pw6

SQL injection vulnerability in AjaxPortal 3.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands vi…

Published Jul 17, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in AjaxPortal 3.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the 'Search' field, a different vulnerability than CVE-2006-3515.

References

20985 third-party-advisory
27068 vdb-entry
ajaxportal-login-search-sql-injection(27644) vdb-entry
20060709 Re: [KAPDA::#46] - AjaxPortal Authentication Bypass mailing-list