CVE-2006-1499

CVE-2006-1499 affects the vCounter application (vCounter 1.0) via the script vCounter.php . The vulnerability is a SQL Injection where user-controlled data from the request URI ($_SERVER[REQUEST_URI]) is concatenated into an INSERT query, leading to arbitrary SQL execution. Root cause: inadequate...

CVE-2006-1499: Undefined Security Weakness

SQL injection vulnerability in vCounter.php in vCounter 1.0 allows remote attackers to execute arbitrary SQL commands via the URI SERVERREQUESTURI variable...