CVE Database
/

CVE-2006-1421

Back to search

CVE-2006-1421

Published: Mar 28, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple SQL injection vulnerabilities in akocomment.php in AkoComment 2.0 module for Mambo, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the (1) acname or (2) contentid parameter.

VendorProductVersions

n/a

n/a

affected
n/a

References

19392
third-party-advisory
x_refsource_SECUNIA
631
third-party-advisory
x_refsource_SREASON
17241
vdb-entry
x_refsource_BID
24209
vdb-entry
x_refsource_OSVDB
ADV-2006-1136
vdb-entry
x_refsource_VUPEN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now