CVE-2006-3926

Published: Jul 31, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in PhpProBid 5.24 allow remote attackers to execute arbitrary SQL commands via the (1) view or (2) start parameters to (a) viewfeedback.php or the (3) orderType parameter to (b) categories.php.

Affected (1)

Products: Php Pro Bid: Php Pro Bid

Php Pro Bid

1 product

Php Pro Bid

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Php Pro Bid Php Pro Bid	Version 5.24

References (16)

http://archives.neohapsis.com/archives/bugtraq/2006-07/0474.html

Source: cve@mitre.org

Exploit

http://secunia.com/advisories/21201

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/1298

Source: cve@mitre.org

http://securitytracker.com/id?1016595

Source: cve@mitre.org

Exploit

http://www.osvdb.org/27545

Source: cve@mitre.org

http://www.osvdb.org/27546

Source: cve@mitre.org

http://www.securityfocus.com/bid/19158

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/28032

Source: cve@mitre.org

http://archives.neohapsis.com/archives/bugtraq/2006-07/0474.html