SQL Injection in Chaossoft Gaestechaos
CVE-2006-4039
Multiple SQL injection vulnerabilities in eintragen.php in GaesteChaos 0.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) gastname, (2) gastwohnort, or (3) gasteintrag parameters.
Vulnerability class: SQL Injection
EPSS: 0.018 (75.8th percentile) — read the EPSS interpretation.
Affected products
- Chaossoft Gaestechaos
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, Exploit, x_refsource_FULLDISC, Mailing List)
- cve@mitre.org (vdb-entry, Not Applicable, x_refsource_VUPEN)
- cve@mitre.org (Permissions Required, x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)