CVE-2006-1042: SQL Injection

Published Mar 7, 2006

Updated

Multiple SQL injection vulnerabilities in Gregarius 0.5.2 allow remote attackers to execute arbitrary SQL commands via the (1) folder parameter to feed.php or (2) rssquery parameter to search.php.

Affected Software

1 affected component

Gregarius Gregarius=0.5.2

Event History

Mar 7, 2006

CVE Published

11:02 AM

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What are the primary vulnerabilities associated with CVE-2006-1042?

CVE-2006-1042 describes multiple SQL injection vulnerabilities in Gregarius 0.5.2 that allow remote attackers to execute arbitrary SQL commands.

Which parameters are susceptible to SQL injection in CVE-2006-1042?

The parameters vulnerable to SQL injection in CVE-2006-1042 are 'folder' in feed.php and 'rss_query' in search.php.

What versions of Gregarius are affected by CVE-2006-1042?

CVE-2006-1042 affects Gregarius version 0.5.2.

How can I mitigate the risks associated with CVE-2006-1042?

To mitigate the risks of CVE-2006-1042, upgrade to a patched version of Gregarius or implement input validation to sanitize user inputs.

What is the potential impact of exploiting CVE-2006-1042?

Exploiting CVE-2006-1042 can allow remote attackers to execute arbitrary SQL commands, potentially compromising the integrity and confidentiality of the database.