3 matches found
Sql injection
SQL injection vulnerability in functions.php in Teca Diary PE 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 yy, 2 mm, and 3 dd parameters...
7.5CVSS9AI score0.01447EPSS
SaveExploits1References8Affected Software1
CVE-2006-0729
SQL injection vulnerability in functions.php in Teca Diary PE 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 yy, 2 mm, and 3 dd parameters...
7.5CVSS8.4AI score0.01447EPSS
SaveExploits1References8
CVE-2006-0729
SQL injection vulnerability CVE-2006-0729 affects Teca Diary PE 1.0 in script functions.php, where un-sanitized parameters yy, mm, and dd allow remote attackers to inject arbitrary SQL. The issue is remote and results in possible arbitrary queries; exploit details are provided in eVuln/PacketStor...
7.5CVSS8.4AI score0.01447EPSS
SaveExploits1References8Affected Software1
20