CVE-2006-1585

Published: Apr 2, 2006Modified: Apr 16, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

Multiple SQL injection vulnerabilities in MonAlbum 0.8.7 allow remote attackers to execute arbitrary SQL commands via (1) the pc parameter in (a) index.php and (2) pnom, (3) pcourriel, and (4) pcommentaire parameters in (b) image_agrandir.php.

Affected (1)

Products: 3dsrc: Monalbum

3dsrc

1 product

Monalbum

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
3dsrc Monalbum	Version 0.8.7

References (14)

http://secunia.com/advisories/19503

Source: cve@mitre.org

http://securityreason.com/securityalert/660

Source: cve@mitre.org

http://www.bash-x.net/undef/adv/monalbum.html

Source: cve@mitre.org

URL Repurposed

http://www.securityfocus.com/archive/1/429475/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/17327

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1206

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/25572

Source: cve@mitre.org

http://secunia.com/advisories/19503