CVE-2006-4056

CVE-2006-4056 relates to multiple SQL injection vulnerabilities in the authentication process of the Address Book software: katzlbt (The Address Book 1.04e and earlier) and The Address Book Reloaded before 2.0-rc4. The flaw allows remote attackers to manipulate SQL via the (1) username or (2) pas...

CVE-2005-4056

CVE-2005-4056 describes a SQL injection vulnerability in the search.php component of PluggedOut Nexus 0.1. The flaw allows remote attackers to manipulate the database by injecting SQL through the Location, Last Name, and First Name parameters. The vulnerability is documented with a high impact po...