CVE-2006-4705

Published: Sep 12, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

SQL injection vulnerability in login.php in dwayner79 and Dominic Gamble Timesheet (aka Timesheet.php) 1.2.1 allows remote attackers to execute arbitrary SQL commands via the username parameter.

Affected (1)

Products: Dominic Gamble: Timesheet.php

Dominic Gamble

1 product

Timesheet.php

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Dominic Gamble Timesheet.php	Version 1.2.1

References (12)

http://secaware.blogspot.com/2006/09/timesheet-121-blind-sql-injection.html

Source: cve@mitre.org

http://secunia.com/advisories/21831

Source: cve@mitre.org

http://securityreason.com/securityalert/1542

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/445603/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/19856

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/3547

Source: cve@mitre.org

http://secaware.blogspot.com/2006/09/timesheet-121-blind-sql-injection.html