CVE-2006-3054

Published: Jun 16, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in VBZooM 1.11 allow remote attackers to execute arbitrary SQL commands via the (1) sobjectID or (2) MAINID parameters to (a) show.php or (3) MainID parameter to (b) subject.php.

Affected (1)

Products: Vbzoom: Vbzoom

Vbzoom

1 product

Vbzoom

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Vbzoom Vbzoom	Version 1.11

References (8)

http://www.securityfocus.com/archive/1/436938/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/436940/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/18403

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/27070

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/436938/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/436940/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/18403

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/27070

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.