CVE-2006-4056
Last modified
CVE-2006-4056 is a vulnerability of currently unknown severity. Multiple SQL injection vulnerabilities in the authentication process in katzlbt (a) The Address Book 1.04e and earlier and (b) The Address Book Reloaded before 2.0-rc4 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters. NOTE: portions of these details are obtained from third party information.. EPSS estimates a 1.46% chance of exploitation in the next 30 days.
Description
Multiple SQL injection vulnerabilities in the authentication process in katzlbt (a) The Address Book 1.04e and earlier and (b) The Address Book Reloaded before 2.0-rc4 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters. NOTE: portions of these details are obtained from third party information.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| The Address Book | The Address Book | <= 1.04e |
| The Address Book Reloaded | The Address Book Reloaded | <= 2.0 |
References
- http://secunia.com/advisories/21364Vendor Advisory
- http://secunia.com/advisories/21379Patch, Vendor Advisory
- http://secunia.com/advisories/21364Vendor Advisory
- http://secunia.com/advisories/21379Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-4056?
How severe is CVE-2006-4056?
How do I fix CVE-2006-4056?
Are you affected by CVE-2006-4056?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
