CVE-2006-3238

Published: Jun 27, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in VBZooM 1.00 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) MemberID parameter to rank.php, and the (2) QuranID parameter to lng.php.

Affected (1)

Products: Vbzoom: Vbzoom

Vbzoom

1 product

Vbzoom

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Vbzoom Vbzoom	Up to 1.00

References (14)

http://secunia.com/advisories/20701/

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/1149

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/437651/100/100/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/437658/100/100/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/18497

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/2468

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/27294

Source: cve@mitre.org

http://secunia.com/advisories/20701/