1. CVE-Search
  2. CVE-2006-0693
ID CVE-2006-0693
Summary Multiple SQL injection vulnerabilities in rb_auth.php in Roberto Butti CALimba 0.99.2 beta and earlier allow remote attackers to execute arbitrary SQL commands and bypass login authentication via the (1) login and (2) password parameters.
References
Vulnerable Configurations
  • cpe:2.3:a:roberto_butti:calimba:0.99.1:*:*:*:*:*:*:*
    cpe:2.3:a:roberto_butti:calimba:0.99.1:*:*:*:*:*:*:*
  • cpe:2.3:a:roberto_butti:calimba:0.99.2_beta:*:*:*:*:*:*:*
    cpe:2.3:a:roberto_butti:calimba:0.99.2_beta:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 19-10-2018 - 15:45)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bid 16632
bugtraq 20060217 [eVuln] CALimba Authentication Bypass Vulnerability
misc http://www.evuln.com/vulns/68/summary.html
secunia 18856
sreason 453
vupen ADV-2006-0523
xf calimba-rbauth-sql-injection(24578)
Last major update 19-10-2018 - 15:45
Published 15-02-2006 - 11:06
Last modified 19-10-2018 - 15:45
Back to Top