SQL Injection in Sangwan Kim Bookmark4u
CVE-2006-7025
SQL injection vulnerability in admin/config.php in Bookmark4U 2.0 and 2.1 allows remote attackers to inject arbitrary SQL command via the sqlcmd parameter.
Vulnerability class: SQL Injection
EPSS: 0.013 (68.2th percentile) — read the EPSS interpretation.
Affected products
- Sangwan_kim Bookmark4u
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry, Broken Link)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (Permissions Required, x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (mailing-list, Exploit, x_refsource_VIM)
- cve@mitre.org (mailing-list, x_refsource_FULLDISC, Third Party Advisory)