CVEvulnerability
CVE-2006-3318
5.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-06-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.1 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in register.php for phpRaid 3.0.6 and possibly other versions, when the authorization type is phpraid, allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) email parameters.
Affected configurations
• spiffyjr phpraid 3.0.6
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/20865 Vendor Advisory
- http://secunia.com/secunia_research/2006-47/advisory/ Vendor Advisory
- http://securityreason.com/securityalert/1173 securityreason.com
- http://www.securityfocus.com/archive/1/438706/100/0/threaded www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/2593 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27459 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/20865 Vendor Advisory
- http://secunia.com/secunia_research/2006-47/advisory/ Vendor Advisory
- http://securityreason.com/securityalert/1173 securityreason.com
- http://www.securityfocus.com/archive/1/438706/100/0/threaded www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/2593 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27459 exchange.xforce.ibmcloud.com