CVE-2006-3515 | BDVDB-2026-18021 Detail
Description#
SQL injection vulnerability in the loginADP function in ajaxp.php in AjaxPortal 3.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username or (2) password parameters.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.securityfocus.com/archive/1/439521/100/0/threaded
- http://www.osvdb.org/27067
- http://www.securityfocus.com/archive/1/439614/100/0/threaded
- http://secunia.com/advisories/20985
- http://www.securityfocus.com/bid/18897
- http://www.kapda.ir/advisory-355.html
- http://www.vupen.com/english/advisories/2006/2714
- http://securityreason.com/securityalert/1206
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.