Description

SQL injection vulnerability in phpMyFAQ 1.6.7 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly the userfile or filename parameter.

Remediation

References

CVE-2006-6912

Related Vulnerabilities

Oracle JRE CVE-2013-1564 Vulnerability (CVE-2013-1564)

TYPO3 Improperly Controlled Modification of Dynamically-Determined Object Attributes Vulnerability (CVE-2020-11066)

WordPress Plugin WP REST API (WP API) Cross-Site Request Forgery (1.1)

Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-21610)

Ampache Other Vulnerability (CVE-2006-5668)

Severity

High

Classification

CVE-2006-6912 CWE-138

Tags

Missing Update Known Vulnerabilities