Unscored CVE-2006-4879 EUVD-2006-4866GHSA-49mr-m45p-mv5c

SQL injection vulnerability in profile.php in David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to execute arbitrary SQ…

Published Sep 19, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in profile.php in David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter.

References

20061 vdb-entry
ADV-2006-3688 vdb-entry
1607 third-party-advisory
22014 third-party-advisory
20060916 PHP-Post Multiple Input Validation Vulnerabilities mailing-list