CVE-2006-3322 - Vulnerability Details - OpenCVE

SQL injection vulnerability in includes/functions_logging.php in phpRaid 3.0.5, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the log_hack function.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity High

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Spiffyjr	Phpraid

Configuration 1 [-]

cpe:2.3:a:spiffyjr:phpraid:3.0.5:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://secunia.com/advisories/20200
http://secunia.com/secunia_research/2006-47/advisory/
http://securityreason.com/securityalert/1173
http://www.securityfocus.com/archive/1/438706/100/0/threaded
http://www.securityfocus.com/bid/18720
http://www.vupen.com/english/advisories/2006/2592
https://exchange.xforce.ibmcloud.com/vulnerabilities/27458

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2006-06-30T20:00:00

Updated: 2024-08-07T18:23:21.149Z

Reserved: 2006-06-30T00:00:00

Link: CVE-2006-3322

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2006-06-30T20:05:00.000

Modified: 2025-04-03T01:03:51.193

Link: CVE-2006-3322

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-06-29T00:00:00", "descriptions": [{"lang": "en", "value": "SQL injection vulnerability in includes/functions_logging.php in phpRaid 3.0.5, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the log_hack function."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-18T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "http://secunia.com/secunia_research/2006-47/advisory/"}, {"name": "ADV-2006-2592", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/2592"}, {"name": "20060629 Secunia Research: phpRaid SQL Injection and File InclusionVulnerabilities", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/438706/100/0/threaded"}, {"name": "phpraid-logging-sql-injection(27458)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27458"}, {"name": "18720", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/18720"}, {"name": "1173", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/1173"}, {"name": "20200", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/20200"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-3322", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "SQL injection vulnerability in includes/functions_logging.php in phpRaid 3.0.5, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the log_hack function."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://secunia.com/secunia_research/2006-47/advisory/", "refsource": "MISC", "url": "http://secunia.com/secunia_research/2006-47/advisory/"}, {"name": "ADV-2006-2592", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/2592"}, {"name": "20060629 Secunia Research: phpRaid SQL Injection and File InclusionVulnerabilities", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/438706/100/0/threaded"}, {"name": "phpraid-logging-sql-injection(27458)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27458"}, {"name": "18720", "refsource": "BID", "url": "http://www.securityfocus.com/bid/18720"}, {"name": "1173", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/1173"}, {"name": "20200", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/20200"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T18:23:21.149Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://secunia.com/secunia_research/2006-47/advisory/"}, {"name": "ADV-2006-2592", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2006/2592"}, {"name": "20060629 Secunia Research: phpRaid SQL Injection and File InclusionVulnerabilities", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/438706/100/0/threaded"}, {"name": "phpraid-logging-sql-injection(27458)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27458"}, {"name": "18720", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/18720"}, {"name": "1173", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/1173"}, {"name": "20200", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/20200"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-3322", "datePublished": "2006-06-30T20:00:00", "dateReserved": "2006-06-30T00:00:00", "dateUpdated": "2024-08-07T18:23:21.149Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:spiffyjr:phpraid:3.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "0CFDEE4C-5E09-47ED-86CE-EABB9CA58D12", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "SQL injection vulnerability in includes/functions_logging.php in phpRaid 3.0.5, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the log_hack function."}, {"lang": "es", "value": "Vulnerabilidad de inyecci\u00f3n SQL en includes/functions_logging.php en phpRaid v3.0.5, y posiblemente otras versiones, permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a trav\u00e9s de la funci\u00f3n log_hack."}], "id": "CVE-2006-3322", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 4.9, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2006-06-30T20:05:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/20200"}, {"source": "cve@mitre.org", "url": "http://secunia.com/secunia_research/2006-47/advisory/"}, {"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/1173"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/438706/100/0/threaded"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/18720"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2006/2592"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27458"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/20200"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/secunia_research/2006-47/advisory/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securityreason.com/securityalert/1173"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/438706/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/18720"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2006/2592"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27458"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}