CVE-2006-4957

Published: Sep 23, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in the GetMember function in functions.php in MyReview 1.9.4 allows remote attackers to execute arbitrary SQL commands via the email parameter to Admin.php.

Affected (1)

Products: The Myreview System: Myreview

The Myreview System

1 product

Myreview

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
The Myreview System Myreview	Version 1.9.4

References (10)

http://secunia.com/advisories/21991

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/20105

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2006/3716

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/29029

Source: cve@mitre.org

https://www.exploit-db.com/exploits/2397

Source: cve@mitre.org

http://secunia.com/advisories/21991