CVE-2006-6912: SQL Injection
Published Dec 31, 2006
·Updated
SQL injection vulnerability in phpMyFAQ 1.6.7 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly the userfile or filename parameter.
Affected Software
1 affected component
PhpMyFaq phpmyfaq<=1.6.7
Event History
Dec 31, 2006
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
DescriptionSeverityWeaknessAffected Software
Jan 9, 2007
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-6912?
CVE-2006-6912 is classified as a high-severity vulnerability due to the potential for remote attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2006-6912?
To fix CVE-2006-6912, upgrade to phpMyFAQ version 1.6.8 or later, which addresses this SQL injection vulnerability.
3
What software is affected by CVE-2006-6912?
CVE-2006-6912 affects phpMyFAQ versions 1.6.7 and earlier.
4
What type of vulnerability is CVE-2006-6912?
CVE-2006-6912 is an SQL injection vulnerability that allows attackers to manipulate database queries.
5
What can be exploited in CVE-2006-6912?
CVE-2006-6912 can be exploited through unspecified vectors, potentially including the userfile or filename parameter.