CVE-2006-0775
Last modified
CVE-2006-0775 is a vulnerability of currently unknown severity. Multiple SQL injection vulnerabilities in show.php in BirthSys 3.1 allow remote attackers to execute arbitrary SQL commands via the $month variable. NOTE: a vector regarding the $date parameter and data.php (date.php) was originally reported, but this appears to be in error.. EPSS estimates a 1.83% chance of exploitation in the next 30 days.
Description
Multiple SQL injection vulnerabilities in show.php in BirthSys 3.1 allow remote attackers to execute arbitrary SQL commands via the $month variable. NOTE: a vector regarding the $date parameter and data.php (date.php) was originally reported, but this appears to be in error.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ridder Roeland | Birthsys | 3.1 |
References
- http://www.evuln.com/vulns/74/summary.htmlExploit, Vendor Advisory
- http://www.evuln.com/vulns/74/summary.htmlExploit, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-0775?
How severe is CVE-2006-0775?
How do I fix CVE-2006-0775?
Are you affected by CVE-2006-0775?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
