Unscored severity · published Jun 22, 2006
CVE-2006-3161
SQL injection vulnerability in misc.php in SaphpLesson 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the action parameter
–
CVSS
1.1%
EPSS
No
On KEV
Description
SQL injection vulnerability in misc.php in SaphpLesson 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the action parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 66% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SA
Saphplesson · Saphp
1.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-3161
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-3161
securityreason.com
http://securityreason.com/securityalert/1123
Exploit
http://securitytracker.com/id?1016342
www.securityfocus.com
http://www.securityfocus.com/archive/1/437659/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/18501
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/27304
More from Saphplesson
–
CVE-2005-3363
SQL injection vulnerability in Saphp Lesson, possibly saphp Lesson1.1 and saphpLesson2.0, allows remote attackers to execute arbitrary SQL commands via the forumid parameter in…