CVE-2006-0693

Description

Multiple SQL injection vulnerabilities in rb_auth.php in Roberto Butti CALimba 0.99.2 beta and earlier allow remote attackers to execute arbitrary SQL commands and bypass login authentication via the (1) login and (2) password parameters.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/24578

http://www.vupen.com/english/advisories/2006/0523

http://www.securityfocus.com/bid/16632

http://www.securityfocus.com/archive/1/425364/100/0/threaded

http://www.evuln.com/vulns/68/summary.html

http://securityreason.com/securityalert/453

http://secunia.com/advisories/18856

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS