CVE-2006-0823

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 1.7%

from disclosure to weapon3650 days

Published on NVDFeb 21

1st PoC+3650d

exploitation probability

1.7%top 26% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Multiple SQL injection vulnerabilities in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attackers to inject arbitrary SQL commands via the (1) userid variable to users.php or (2) sessid variable to lib-sessions.php.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/43833unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://secunia.com/advisories/18920 https://exchange.xforce.ibmcloud.com/vulnerabilities/24775 http://www.geeklog.net/article.php/geeklog-1.4.0sr1 http://www.gulftech.org/?node=research&article_id=00102-02192006 http://www.osvdb.org/23348 http://www.securityfocus.com/archive/1/425506/100/0/threaded http://www.securityfocus.com/bid/16755 http://www.vupen.com/english/advisories/2006/0661