Published: 09/01/2006 Updated: 19/10/2018

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP prior to 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PhpOpenChat, possibly (7) MAXdev MD-Pro, and (8) Simplog, allows remote malicious users to execute arbitrary PHP functions via the do parameter, which is saved in a variable that is then executed as a function, as demonstrated using phpinfo.

Vulnerable Product	Search on Vulmon	Subscribe to Product
moodle moodle 1.5.3
postnuke software foundation postnuke 0.761
the cacti group cacti 0.8.6g
mantis mantis 0.19.4
mantis mantis 1.0.0_rc4
john lim adodb 4.66
john lim adodb 4.68

Debian Bug report logs - #349985 various unfixed security bugs Package: libphp-adodb; Maintainer for libphp-adodb is Cameron Dale <camrdale@gmailcom>; Source for libphp-adodb is src:libphp-adodb (PTS, buildd, popcon) Reported by: Florian Weimer <fw@denebenyode> Date: Thu, 26 Jan 2006 13:03:05 UTC Severity: grave ...

Several vulnerabilities have been discovered in libphp-adodb, the 'adodb' database abstraction layer for PHP The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2006-0146 Andreas Sandblad discovered that improper user input sanitisation results in a potential remote SQL injection vulnerability enabling ...

Several vulnerabilities have been discovered in libphp-adodb, the 'adodb' database abstraction layer for PHP, which is embedded in cacti, a frontend to rrdtool for monitoring systems and services The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2006-0146 Andreas Sandblad discovered that improper user inp ...

Several vulnerabilities have been discovered in libphp-adodb, the 'adodb' database abstraction layer for PHP, which is embedded in moodle, a course management system for online learning The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2006-0146 Andreas Sandblad discovered that improper user input sanitis ...

#!/usr/bin/php -q -d short_open_tag=on <? echo "Simplog <= 092 \"s\" remote cmmnds xctn\r\n"; echo "by rgod rgod@autisticiorg\r\n"; echo "site: retrogodaltervistaorg\r\n\r\n"; echo "dork: intext:\"Powered by simplog\"\r\n\r\n"; if ($argc<5) { echo "Usage: php "$argv[0]" host path location cmd OPTIONS\r\n"; echo "host: t ...

NVD-CWE-Other http://secunia.com/secunia_research/2005-64/advisory/http://secunia.com/advisories/17418 http://secunia.com/advisories/18254 http://secunia.com/advisories/18267 http://secunia.com/advisories/18260 http://secunia.com/advisories/18276 http://secunia.com/advisories/18233 http://www.debian.org/security/2006/dsa-1029 http://www.debian.org/security/2006/dsa-1030 http://www.debian.org/security/2006/dsa-1031 http://secunia.com/advisories/19555 http://secunia.com/advisories/19590 http://secunia.com/advisories/19591 http://retrogod.altervista.org/phpopenchat_30x_sql_xpl.html http://retrogod.altervista.org/simplog_092_incl_xpl.html http://secunia.com/advisories/19600 http://secunia.com/advisories/19628 http://www.gentoo.org/security/en/glsa/glsa-200604-07.xml http://secunia.com/advisories/19691 http://www.vupen.com/english/advisories/2006/1305 http://www.vupen.com/english/advisories/2006/0104 http://www.vupen.com/english/advisories/2006/0102 http://www.vupen.com/english/advisories/2006/1332 http://www.vupen.com/english/advisories/2006/0101 http://www.vupen.com/english/advisories/2006/0103 http://www.osvdb.org/22291 https://exchange.xforce.ibmcloud.com/vulnerabilities/24052 https://www.exploit-db.com/exploits/1663 http://www.securityfocus.com/archive/1/430743/100/0/threaded http://www.securityfocus.com/archive/1/430448/100/0/threaded https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=349985 https://nvd.nist.gov https://www.exploit-db.com/exploits/1663/https://www.debian.org/security/./dsa-1029

CVE-2006-0147

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect