CVE-2006-3048: SQL Injection
Published Jun 16, 2006
·Updated
SQL injection vulnerability in TikiWiki 1.9.3.2 and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via unknown attack vectors.
Affected Software
8 affected components
Tiki Wiki CMS Groupware=1.9.0-rc2
Tiki Wiki CMS Groupware=1.9.3
Tiki Wiki CMS Groupware=1.9.0
Tiki Wiki CMS Groupware=1.9.0-rc1
Tiki Wiki CMS Groupware=1.9.0-rc3
Tiki Wiki CMS Groupware=1.9.2
Tiki Wiki CMS Groupware=1.9.1
Tiki Wiki CMS Groupware<=1.9.3.1
Remediation
Patch Available
Event History
Jun 16, 2006
CVE Published
10:02 AM
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-3048?
CVE-2006-3048 is classified as a medium severity SQL injection vulnerability that can allow remote attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2006-3048?
To fix CVE-2006-3048, upgrade to TikiWiki version 1.9.3.2 or later to mitigate the SQL injection vulnerability.
3
Which versions of TikiWiki are affected by CVE-2006-3048?
TikiWiki versions 1.9.0 up to 1.9.3.1 are affected by CVE-2006-3048.
4
What types of attacks can be performed using CVE-2006-3048?
Attackers can exploit CVE-2006-3048 to execute arbitrary SQL commands, potentially leading to unauthorized data access.
5
Is there a known exploit for CVE-2006-3048?
Yes, CVE-2006-3048 has known exploit vectors that utilize SQL injection to compromise the TikiWiki application.