Vulnerability Details CVE-2006-5828
SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.1 and earlier allows remote attackers to execute arbitrary SQL commands via the user_id parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 66.2%
CVSS Severity
CVSS v2 Score 7.5
References
- http://secunia.com/advisories/22704
- http://www.securityfocus.com/bid/20935
- http://www.vupen.com/english/advisories/2006/4403
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30023
- https://www.exploit-db.com/exploits/2720
- http://secunia.com/advisories/22704
- http://www.securityfocus.com/bid/20935
- http://www.vupen.com/english/advisories/2006/4403
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30023
- https://www.exploit-db.com/exploits/2720
Products affected by CVE-2006-5828
-
cpe:2.3:a:deltascripts:php_classifieds:6.0.5
-
cpe:2.3:a:deltascripts:php_classifieds:6.18
-
cpe:2.3:a:deltascripts:php_classifieds:6.20
-
cpe:2.3:a:deltascripts:php_classifieds:7.1