CVEvulnerability
CVE-2006-4039
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-08-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in eintragen.php in GaesteChaos 0.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) gastname, (2) gastwohnort, or (3) gasteintrag parameters.
Affected configurations
• chaossoft gaestechaos (<= 0.2)
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://marc.info/?l=full-disclosure&m=115464286427745&w=2 Exploit, Mailing List
- http://secunia.com/advisories/21357 Permissions Required, Third Party Advisory
- http://www.securityfocus.com/archive/1/442205/100/200/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/19343 Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2006/3155 Not Applicable
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28218 exchange.xforce.ibmcloud.com
- http://marc.info/?l=full-disclosure&m=115464286427745&w=2 Exploit, Mailing List
- http://secunia.com/advisories/21357 Permissions Required, Third Party Advisory
- http://www.securityfocus.com/archive/1/442205/100/200/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/19343 Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2006/3155 Not Applicable
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28218 exchange.xforce.ibmcloud.com