CVEvulnerability
CVE-2006-0146
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-01-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PHPOpenChat, (7) MAXdev MD-Pro, and (8) MediaBeez, when the MySQL root password is empty, allows remote attackers to execute arbitrary SQL commands via the sql parameter.
Affected configurations
• john lim adodb 4.66
• john lim adodb 4.68
• mantis mantis 0.19.4
• mantis mantis 1.0.0 rc4
• mediabeez mediabeez
• moodle moodle 1.5.3
• postnuke software foundation postnuke 0.761
• the cacti group cacti 0.8.6g
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://retrogod.altervista.org/phpopenchat_30x_sql_xpl.html Exploit
- http://secunia.com/advisories/17418 Exploit, Patch, Vendor Advisory
- http://secunia.com/advisories/18233 Patch, Vendor Advisory
- http://secunia.com/advisories/18254 Vendor Advisory
- http://secunia.com/advisories/18260 Patch, Vendor Advisory
- http://secunia.com/advisories/18267 Vendor Advisory
- http://secunia.com/advisories/18276 Patch, Vendor Advisory
- http://secunia.com/advisories/18720 Patch, Vendor Advisory
- http://secunia.com/advisories/19555 Patch, Vendor Advisory
- http://secunia.com/advisories/19563 Patch, Vendor Advisory
- http://secunia.com/advisories/19590 Patch, Vendor Advisory
- http://secunia.com/advisories/19591 Patch, Vendor Advisory
- http://secunia.com/advisories/19600 Vendor Advisory
- http://secunia.com/advisories/19691 Vendor Advisory
- http://secunia.com/advisories/19699 Patch, Vendor Advisory
- http://secunia.com/advisories/24954 Vendor Advisory
- http://secunia.com/secunia_research/2005-64/advisory/ Exploit, Patch, Vendor Advisory
- http://securityreason.com/securityalert/713 securityreason.com
- http://www.debian.org/security/2006/dsa-1029 Patch, Vendor Advisory
- http://www.debian.org/security/2006/dsa-1030 Patch, Vendor Advisory
- http://www.debian.org/security/2006/dsa-1031 Patch, Vendor Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200604-07.xml Patch, Vendor Advisory
- http://www.maxdev.com/Article550.phtml URL Repurposed
- http://www.osvdb.org/22290 Exploit, Patch
- http://www.securityfocus.com/archive/1/423784/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/430448/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/466171/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/16187 Exploit, Patch
- http://www.vupen.com/english/advisories/2006/0101 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/0102 www.vupen.com
- http://www.vupen.com/english/advisories/2006/0103 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/0104 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/0105 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/0370 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/0447 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/1304 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/1305 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/1419 www.vupen.com
- http://www.xaraya.com/index.php/news/569 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24051 exchange.xforce.ibmcloud.com
- http://retrogod.altervista.org/phpopenchat_30x_sql_xpl.html Exploit
- http://secunia.com/advisories/17418 Exploit, Patch, Vendor Advisory
- http://secunia.com/advisories/18233 Patch, Vendor Advisory
- http://secunia.com/advisories/18254 Vendor Advisory
- http://secunia.com/advisories/18260 Patch, Vendor Advisory
- http://secunia.com/advisories/18267 Vendor Advisory
- http://secunia.com/advisories/18276 Patch, Vendor Advisory
- http://secunia.com/advisories/18720 Patch, Vendor Advisory
- http://secunia.com/advisories/19555 Patch, Vendor Advisory
- http://secunia.com/advisories/19563 Patch, Vendor Advisory
- http://secunia.com/advisories/19590 Patch, Vendor Advisory
- http://secunia.com/advisories/19591 Patch, Vendor Advisory
- http://secunia.com/advisories/19600 Vendor Advisory
- http://secunia.com/advisories/19691 Vendor Advisory
- http://secunia.com/advisories/19699 Patch, Vendor Advisory
- http://secunia.com/advisories/24954 Vendor Advisory
- http://secunia.com/secunia_research/2005-64/advisory/ Exploit, Patch, Vendor Advisory
- http://securityreason.com/securityalert/713 securityreason.com
- http://www.debian.org/security/2006/dsa-1029 Patch, Vendor Advisory
- http://www.debian.org/security/2006/dsa-1030 Patch, Vendor Advisory
- http://www.debian.org/security/2006/dsa-1031 Patch, Vendor Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200604-07.xml Patch, Vendor Advisory
- http://www.maxdev.com/Article550.phtml URL Repurposed
- http://www.osvdb.org/22290 Exploit, Patch
- http://www.securityfocus.com/archive/1/423784/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/430448/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/466171/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/16187 Exploit, Patch
- http://www.vupen.com/english/advisories/2006/0101 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/0102 www.vupen.com
- http://www.vupen.com/english/advisories/2006/0103 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/0104 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/0105 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/0370 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/0447 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/1304 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/1305 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/1419 www.vupen.com
- http://www.xaraya.com/index.php/news/569 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24051 exchange.xforce.ibmcloud.com