CVE-2006-0626: SQL Injection
Published Feb 9, 2006
·Updated
SQL injection vulnerability in spipaccesdoc.php3 in SPIP 1.8.2g and earlier allows remote attackers to execute arbitrary SQL commands via the file parameter.
Affected Software
1 affected component
Spip SPIP=1.8.2g
Event History
Feb 9, 2006
CVE Published
06:06 PM
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-0626?
CVE-2006-0626 has a medium severity rating due to the potential for remote SQL injection attacks.
2
How do I fix CVE-2006-0626?
To fix CVE-2006-0626, upgrade to SPIP version 1.8.2h or later to eliminate the vulnerability.
3
What types of attacks can CVE-2006-0626 facilitate?
CVE-2006-0626 can facilitate arbitrary SQL commands being executed by attackers, potentially compromising the database.
4
Which versions of SPIP are affected by CVE-2006-0626?
SPIP versions 1.8.2g and earlier are affected by CVE-2006-0626 vulnerability.
5
Who can be impacted by CVE-2006-0626?
Websites using the vulnerable versions of SPIP can be impacted, allowing attackers to manipulate the database.