CVE-2006-0074

SQL injection vulnerability in profile.php in PHPenpals allows remote attackers to execute arbitrary SQL commands via the personalID parameter. NOTE: it was later reported that 1.1 and earlier are affected.

• CWE-89

• http://evuln.com/vulns/5/summary.html
• http://secunia.com/advisories/18269Vendor Advisory
• http://www.osvdb.org/22150Exploit
• http://www.securityfocus.com/archive/1/420690/100/0/threaded
• http://www.securityfocus.com/bid/16109Exploit
• http://www.vupen.com/english/advisories/2006/0005Vendor Advisory
• https://www.exploit-db.com/exploits/8706
• http://evuln.com/vulns/5/summary.html
• http://secunia.com/advisories/18269Vendor Advisory
• http://www.osvdb.org/22150Exploit
• http://www.securityfocus.com/archive/1/420690/100/0/threaded
• http://www.securityfocus.com/bid/16109Exploit
• http://www.vupen.com/english/advisories/2006/0005Vendor Advisory
• https://www.exploit-db.com/exploits/8706

Published

Jan 4, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-0068SQL injection vulnerability in Primo Cart 1.0 and earlier al…
• CVE-2006-0069Cross-site scripting (XSS) vulnerability in addentry.php in …
• CVE-2006-0070Drupal allows remote attackers to conduct cross-site scripti…
• CVE-2006-0071The ebuild for pinentry before 0.7.2-r2 on Gentoo Linux sets…
• CVE-2006-0072Buffer overflow in termsh on SCO OpenServer 5.0.7 allows rem…
• CVE-2006-0073Cross-site scripting (XSS) vulnerability in DiscusWare Discu…
• CVE-2006-0075Direct static code injection vulnerability in phpBook 1.3.2 …
• CVE-2006-0076PHP remote file include vulnerability in forum.php in oaBoar…
• CVE-2006-0077Off-by-one error in the getfattr function in File::ExtAttr b…
• CVE-2006-0078Multiple cross-site scripting (XSS) vulnerabilities in B-net…
• CVE-2006-0079SQL injection vulnerability in auth.php in ScozNet ScozBook …
• CVE-2006-0080Cross-site scripting (XSS) vulnerability in vBulletin 3.5.2,…