CVE-2006-5840

Multiple SQL injection vulnerabilities in Abarcar Realty Portal allow remote attackers to execute arbitrary SQL commands via the (1) neid parameter to newsdetails.php, or the (2) slid parameter to slistl.php. NOTE: the cat vector is already covered by CVE-2006-2853. NOTE: the vendor has notified CVE that the current version only creates static pages, and that slistl.php/slid never existed in any version

• CWE-89

• http://attrition.org/pipermail/vim/2006-December/001190.htmlMailing List
• http://s-a-p.ca/index.php?page=OurAdvisories&id=7URL Repurposed
• http://secunia.com/advisories/22792Vendor Advisory
• http://securityreason.com/securityalert/1840Third Party Advisory
• http://www.attrition.org/pipermail/vim/2006-December/001170.htmlMailing List
• http://www.osvdb.org/30249Broken Link
• http://www.osvdb.org/30250Broken Link
• http://www.securityfocus.com/archive/1/450946/100/0/threadedThird Party Advisory
• http://www.securityfocus.com/bid/20970Exploit, Patch
• http://www.vupen.com/english/advisories/2006/4418Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30135Third Party Advisory
• http://attrition.org/pipermail/vim/2006-December/001190.htmlMailing List
• http://s-a-p.ca/index.php?page=OurAdvisories&id=7URL Repurposed
• http://secunia.com/advisories/22792Vendor Advisory
• http://securityreason.com/securityalert/1840Third Party Advisory
• http://www.attrition.org/pipermail/vim/2006-December/001170.htmlMailing List
• http://www.osvdb.org/30249Broken Link
• http://www.osvdb.org/30250Broken Link
• http://www.securityfocus.com/archive/1/450946/100/0/threadedThird Party Advisory
• http://www.securityfocus.com/bid/20970Exploit, Patch
• http://www.vupen.com/english/advisories/2006/4418Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30135Third Party Advisory

Published

Nov 10, 2006

Last Modified

Jun 16, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-5834Directory traversal vulnerability in general.php in OpenSolu…
• CVE-2006-5835The Notes Remote Procedure Call (NRPC) protocol in IBM Lotus…
• CVE-2006-5836The fpathconf syscall function in bsd/kern/kern_descrip.c in…
• CVE-2006-5837Static code injection vulnerability in chat_panel.php in the…
• CVE-2006-5838PHP remote file inclusion vulnerability in lib/class.Databas…
• CVE-2006-5839PHP remote file inclusion vulnerability in ad_main.php in PH…
• CVE-2006-5841Multiple PHP remote file inclusion vulnerabilities in dodosm…
• CVE-2006-5842The keystore file in Unicore Client before 5.6 build 5, when…
• CVE-2006-5843Cross-site scripting (XSS) vulnerability in index.php in Spe…
• CVE-2006-5844Speedywiki 2.0 allows remote attackers to obtain the full pa…
• CVE-2006-5845Unrestricted file upload vulnerability in index.php in Speed…
• CVE-2006-5846Directory traversal vulnerability in index.php in FreeWebsho…