6.4
CVSSv2

CVE-2006-2209

Published: 05/05/2006 Updated: 20/07/2017
CVSS v2 Base Score: 6.4 | Impact Score: 4.9 | Exploitability Score: 10
VMScore: 645
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N

Vulnerability Summary

Multiple SQL injection vulnerabilities in index.php in PHP Arena paCheckBook 1.1 allow remote malicious users to execute arbitrary SQL commands via (1) the transtype parameter in an add action or (2) entry parameter in an edit action. NOTE: the provenance of this information is unknown; the details are obtained from third party information.

Vulnerable Product Search on Vulmon Subscribe to Product

php arena pacheckbook 1.1

Exploits

source: wwwsecurityfocuscom/bid/17821/info Pacheckbook is prone to multiple SQL-injection vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries A successful exploit could allow an attacker to compromise the application, access or modify data, or exp ...