CVE-2006-1853

Published: Apr 19, 2006Modified: Apr 16, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in ModernBill 4.3.2 and earlier allow remote attackers or administrators to execute arbitrary SQL commands via the (1) id parameter in (a) user.php, or (2) where and (3) order parameters to (b) admin.php.

Affected (1)

Products: Moderngigabyte: Modernbill

Moderngigabyte

1 product

Modernbill

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Moderngigabyte Modernbill	Up to 4.3.2

References (10)

http://pridels0.blogspot.com/2006/04/modernbill-multiple-sql-inj-vuln.html

Source: cve@mitre.org

http://secunia.com/advisories/19641

Source: cve@mitre.org

http://www.securityfocus.com/bid/17596

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1415

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/25926

Source: cve@mitre.org

http://pridels0.blogspot.com/2006/04/modernbill-multiple-sql-inj-vuln.html