CVE-2006-0729

Description

SQL injection vulnerability in functions.php in Teca Diary PE 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) yy, (2) mm, and (3) dd parameters.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/24643

http://www.vupen.com/english/advisories/2006/0615

http://www.securityfocus.com/bid/16686

http://www.securityfocus.com/archive/1/425892/30/6800/threaded

http://www.evuln.com/vulns/75/summary.html

http://securitytracker.com/id?1015674

http://securityreason.com/securityalert/477

http://secunia.com/advisories/18876

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS