CVE-2006-1501

2006-03-3000:00:00

mitre

www.cve.org

AI Score

8.4

Confidence

Low

EPSS

0.005

Percentile

76.6%

JSON

SQL injection vulnerability in index.php in OneOrZero 1.6.3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly in the kans action.

References

osvdb.org/ref/24/24228-oneorzero.txt

secunia.com/advisories/19446

www.osvdb.org/24228

www.securityfocus.com/bid/17298

www.vupen.com/english/advisories/2006/1146

exchange.xforce.ibmcloud.com/vulnerabilities/25511