CVE-2006-3959

SQL injection vulnerability in protect.php in X-Scripts X-Protection 1.10, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameter.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

1.25% chance of exploitation in the next 30 days, 67th percentile

Published

2006-08-01

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/28303

References

• CVE Record
• NVD entry

Related

• CVE-2006-3957
• CVE-2006-3960
• CVE-2006-3955
• CVE-2006-3961
• CVE-2006-3952
• CVE-2006-3962