CVE-2006-3111 | BDVDB-2026-17649 Detail

Description#

Multiple SQL injection vulnerabilities in main.php in Chipmailer 1.09 allow remote attackers to execute arbitrary SQL commands via multiple parameters, as demonstrated by (1) anfang, (2) name, (3) mail, (4) anrede, (5) vorname, (6) nachname, (7) gebtag, (8) gebmonat, and (9) gebjahr.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/20643
https://exchange.xforce.ibmcloud.com/vulnerabilities/27158
http://www.vupen.com/english/advisories/2006/2359
http://www.securityfocus.com/bid/18463
http://marc.info/?l=bugtraq&m=115024576618386&w=2
http://securitytracker.com/id?1016315

Exploit#

No public exploit known

History#

Version 12006-06-21Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.