CVE-2006-2209

Published: May 5, 2006Modified: Apr 16, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

Multiple SQL injection vulnerabilities in index.php in PHP Arena paCheckBook 1.1 allow remote attackers to execute arbitrary SQL commands via (1) the transtype parameter in an add action or (2) entry parameter in an edit action. NOTE: the provenance of this information is unknown; the details are obtained from third party information.

Affected (1)

Products: Php Arena: Pacheckbook

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Php Arena Pacheckbook	Version 1.1

References (12)

http://downloads.securityfocus.com/vulnerabilities/exploits/pacheckbook-1.1-mutlsql.txt

Source: cve@mitre.org

Exploit

http://secunia.com/advisories/20008

Source: cve@mitre.org

http://www.osvdb.org/25349

Source: cve@mitre.org

http://www.securityfocus.com/bid/17821

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2006/1691

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26356

Source: cve@mitre.org

http://downloads.securityfocus.com/vulnerabilities/exploits/pacheckbook-1.1-mutlsql.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://secunia.com/advisories/20008

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/25349

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/17821

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.vupen.com/english/advisories/2006/1691

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/26356

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.