Multiple SQL injection vulnerabilities in ModernBill 4.3.2 and earlier allow remote attackers or administrators to execute arbitrary SQL commands via the (1) id parameter in (a) user.php, or (2) where and (3) order parameters to (b) admin.php.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2006-04-19T16:00:00
Updated: 2024-08-07T17:27:29.222Z
Reserved: 2006-04-19T00:00:00
Link: CVE-2006-1853
Vulnrichment
No data.
NVD
Status : Modified
Published: 2006-04-19T16:06:00.000
Modified: 2017-07-20T01:30:57.770
Link: CVE-2006-1853
Redhat
No data.