CVEvulnerability
CVE-2006-0205
5.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-01-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.1 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in Wordcircle 2.17 allow remote attackers to (1) execute arbitrary SQL commands and bypass authentication via the password field in the login action to index.php (involving v_login.php and s_user.php) and (2) have other unknown impact via certain other fields in unspecified scripts.
Affected configurations
• wordcircle wordcircle 2.17
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://evuln.com/vulns/27/summary.html Exploit
- http://evuln.com/vulns/28/summary.html Exploit
- http://secunia.com/advisories/18440 Vendor Advisory
- http://securityreason.com/securityalert/345 securityreason.com
- http://securityreason.com/securityalert/346 securityreason.com
- http://www.osvdb.org/22358 Exploit
- http://www.securityfocus.com/archive/1/421745/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/421746/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/16227 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/0185 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24105 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24108 exchange.xforce.ibmcloud.com
- http://evuln.com/vulns/27/summary.html Exploit
- http://evuln.com/vulns/28/summary.html Exploit
- http://secunia.com/advisories/18440 Vendor Advisory
- http://securityreason.com/securityalert/345 securityreason.com
- http://securityreason.com/securityalert/346 securityreason.com
- http://www.osvdb.org/22358 Exploit
- http://www.securityfocus.com/archive/1/421745/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/421746/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/16227 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/0185 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24105 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24108 exchange.xforce.ibmcloud.com