CVEvulnerability
CVE-2006-3244
5.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-06-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.1 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:P
Description
Multiple SQL injection vulnerabilities in Anthill 0.2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) order parameter in buglist.php and the (2) bug parameter in query.php.
Affected configurations
• anthill anthill (<= 0.2.6)
• anthill anthill 0.3.0
References
- http://pridels0.blogspot.com/2006/06/anthill-sql-injection-vuln.html pridels0.blogspot.com
- http://secunia.com/advisories/20838 Vendor Advisory
- http://www.securityfocus.com/bid/18661 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/2529 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27373 exchange.xforce.ibmcloud.com
- http://pridels0.blogspot.com/2006/06/anthill-sql-injection-vuln.html pridels0.blogspot.com
- http://secunia.com/advisories/20838 Vendor Advisory
- http://www.securityfocus.com/bid/18661 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/2529 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27373 exchange.xforce.ibmcloud.com