SQL Injection Vulnerability in OpenDocMan by OpenDocMan
CVE-2006-5655

Currently unrated

Key Information:

Vendor

Opendocman

Status
Opendocman
Vendor
CVE Published:
3 November 2006

What is CVE-2006-5655?

A SQL injection vulnerability exists in the index.php file of OpenDocMan version 1.2p3, which allows remote attackers to manipulate SQL queries through the 'username' parameter. This could potentially enable unauthorized execution of arbitrary SQL commands, leading to data exposure or integrity issues.

References

http://securityreason.com/securityalert/1809
third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/bid/20809
vdb-entryx_refsource_BID
http://www.securityfocus.com/archive/1/450058/100/0/threaded
mailing-listx_refsource_BUGTRAQ

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.