CVE-2006-2279

Published: May 10, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in SaphpLesson 3.0 allow remote attackers to execute arbitrary SQL commands via (1) the Find parameter in (a) search.php, and the (2) LID and (3) Rate parameters in (b) misc.php.

Affected (1)

Products: Arabless: Saphplesson

Arabless

1 product

Saphplesson

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Arabless Saphplesson	Version 3.0

References (16)

http://secunia.com/advisories/20034

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/862

Source: cve@mitre.org

http://www.osvdb.org/25362

Source: cve@mitre.org

http://www.osvdb.org/25363

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/433052/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/17848

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1708

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26293

Source: cve@mitre.org

http://secunia.com/advisories/20034