CVE-2006-4056

Multiple SQL injection vulnerabilities in the authentication process in katzlbt a The Address Book 1.04e and earlier and b The Address Book Reloaded before 2.0-rc4 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameters. NOTE: portions of these details...

CVE-2006-4056

CVE-2006-4056 relates to multiple SQL injection vulnerabilities in the authentication process of the Address Book software: katzlbt (The Address Book 1.04e and earlier) and The Address Book Reloaded before 2.0-rc4. The flaw allows remote attackers to manipulate SQL via the (1) username or (2) pas...

CVE-2006-4056

Multiple SQL injection vulnerabilities in the authentication process in katzlbt a The Address Book 1.04e and earlier and b The Address Book Reloaded before 2.0-rc4 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameters. NOTE: portions of these details...