CVE-2006-4575
Last modified
CVE-2006-4575 is a vulnerability of currently unknown severity. Multiple SQL injection vulnerabilities in The Address Book 1.04e allow remote attackers to execute arbitrary SQL commands via the (1) lastname, (2) firstname, (3) passwordOld, (4) passwordNew, (5) id, (6) language, (7) defaultLetter, (8) newuserPass, (9) newuserType, (10) newuserEmail parameters in (a) user.php; the (11) goTo and (12) search parameters in (b) search.php; and the (13) groupAddName parameter in (c) save.php.. EPSS estimates a 2.11% chance of exploitation in the next 30 days.
Description
Multiple SQL injection vulnerabilities in The Address Book 1.04e allow remote attackers to execute arbitrary SQL commands via the (1) lastname, (2) firstname, (3) passwordOld, (4) passwordNew, (5) id, (6) language, (7) defaultLetter, (8) newuserPass, (9) newuserType, (10) newuserEmail parameters in (a) user.php; the (11) goTo and (12) search parameters in (b) search.php; and the (13) groupAddName parameter in (c) save.php.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| The Address Book | The Address Book | 1.04e |
References
- http://secunia.com/secunia_research/2006-76/advisory/Exploit, Vendor Advisory
- http://secunia.com/secunia_research/2006-76/advisory/Exploit, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-4575?
How severe is CVE-2006-4575?
How do I fix CVE-2006-4575?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2006
- CVE-2006-4569The popup blocker in Mozilla Firefox before 1.5.0.7 opens th…
- CVE-2006-4570Mozilla Thunderbird before 1.5.0.7 and SeaMonkey before 1.0.…
- CVE-2006-4571Multiple unspecified vulnerabilities in Firefox before 1.5.0…
- CVE-2006-4572ip6_tables in netfilter in the Linux kernel before 2.6.16.31…
- CVE-2006-4573Multiple unspecified vulnerabilities in the "utf8 combining …
- CVE-2006-4574Off-by-one error in the MIME Multipart dissector in Wireshar…7.5
- CVE-2006-4576Cross-site scripting (XSS) vulnerability in The Address Book…
- CVE-2006-4577Multiple cross-site scripting (XSS) vulnerabilities in The A…
- CVE-2006-4578export.php in The Address Book 1.04e writes username and pas…
- CVE-2006-4579Directory traversal vulnerability in users.php in The Addres…
- CVE-2006-4580register.php in The Address Book 1.04e allows remote attacke…
- CVE-2006-4581Unrestricted file upload vulnerability in The Address Book 1…
Are you affected by CVE-2006-4575?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST