CVE-2006-3886 | BDVDB-2026-18349 Detail

Description#

SQL injection vulnerability in Shalwan MusicBox 2.3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter in a viewgallery action in a request for the top-level URI. NOTE: the start parameter/search action is already covered by CVE-2006-1807, and the show parameter/top action is already covered by CVE-2006-1360.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://securityreason.com/securityalert/1284
http://www.securityfocus.com/archive/1/441000/100/0/threaded
http://www.securityfocus.com/bid/19129
https://exchange.xforce.ibmcloud.com/vulnerabilities/27926

Exploit#

No public exploit known

History#

Version 12006-07-27Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.