Unscored CVE-2006-7025 EUVD-2006-7007GHSA-m4rr-gqwr-g723

SQL injection vulnerability in admin/config.php in Bookmark4U 2.0 and 2.1 allows remote attackers to inject arbitrary SQL command via the s…

Published Feb 23, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in admin/config.php in Bookmark4U 2.0 and 2.1 allows remote attackers to inject arbitrary SQL command via the sqlcmd parameter.

References

ADV-2006-1456 vdb-entry
24795 vdb-entry
bookmark4u-config-sql-injection(25956) vdb-entry
19758 third-party-advisory
20070222 Source verify and clarification of old bookmark4u SQL injection mailing-list
20060420 Sql Injection in BookMark4u mailing-list