CVE-2006-0413
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
NewsPHP是一款基于Web和PHP的新闻和网络杂志发布程序。 NewsPHP对用户提交的参数没有做足够的检查过滤，远程攻击者可能利用此漏洞对服务器执行SQL注入攻击。通过在输入参数中插入特定的字串，远程攻击者可以任意修改或破坏数据库数据。
Public Exploits 1
ExploitDB · 1
EDB-27116 [webapps]
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2006-0413
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Multiple SQL injection vulnerabilities in index.php in NewsPHP allow remote attackers to execute arbitrary SQL commands via the (1) discuss, (2) tim, (3) id, (4) last, and (5) limit parameter.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
NewsPHP index.php多个远程SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
NewsPHP是一款基于Web和PHP的新闻和网络杂志发布程序。 NewsPHP对用户提交的参数没有做足够的检查过滤，远程攻击者可能利用此漏洞对服务器执行SQL注入攻击。通过在输入参数中插入特定的字串，远程攻击者可以任意修改或破坏数据库数据。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2006-0413
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2006-0413
请登录查看更多情报信息。
Vendor Advisories for CVE-2006-0413 (6)
Same Patch Batch · n/a · 2006-01-25 · 37 CVEs total
| CVE-2006-0402 | Zoph SQL注入漏洞 | |
| CVE-2006-0411 | Claroline 会话劫持漏洞 | |
| CVE-2006-0412 | CyberShop SQL注入漏洞 | |
| CVE-2006-0414 | Tor隐藏服务泄露漏洞 | |
| CVE-2006-0415 | SleeperChat Index.PHP跨站脚本攻击漏洞 | |
| CVE-2006-0416 | SleeperChat txt参数安全绕过漏洞 | |
| CVE-2006-0417 | miniBloggie Login.PHP SQL注入漏洞 | |
| CVE-2006-0418 | 123 Flash Chat Eval注入漏洞 | |
| CVE-2006-0224 | Eterm LibAST Library缓冲区溢出漏洞 | |
| CVE-2006-0225 | OpenSSH SCP本地Shell命令执行漏洞 | |
| CVE-2006-0403 | e-moBLOG多个SQL注入漏洞 | |
| CVE-2006-0404 | Note-A-Day Weblog 'archive/.phpass-admin'信息泄露漏洞 | |
| CVE-2006-0405 | LibTIFF TIFFFetchShortPair 拒绝服务漏洞 | |
| CVE-2006-0406 | MyBB search.php 信息泄露漏洞 | |
| CVE-2006-0407 | AZ Bulletin Board Post.PHP 跨站脚本攻击漏洞 | |
| CVE-2006-0408 | Sun Grid Engine 未明漏洞 | |
| CVE-2006-0409 | Pixelpost 跨站脚本攻击漏洞 | |
| CVE-2006-0410 | ADOdb PostgreSQL SQL注入漏洞 | |
| CVE-2006-0428 | BEA WebLogic多个远程或本地安全漏洞 | |
| CVE-2006-0420 | BEA WebLogic Server和WebLogic Express 循环堆栈溢出错误漏洞 |
Showing top 20 of 37 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2006-0413
No comments yet