CVE-2006-2826

SQL injection vulnerability in sessions.inc in PHP Base Library (PHPLib) before 7.4a allows remote attackers to execute arbitrary SQL commands via the id variable, which is set by a client through a query string or a cookie.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

3.12% chance of exploitation in the next 30 days, 87th percentile

Published

2006-06-05

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/43838

References

• CVE Record
• NVD entry

Related

• CVE-2006-2821
• CVE-2006-2828
• CVE-2006-2819
• CVE-2006-2834
• CVE-2006-2818
• CVE-2006-2835