CVE-2006-7115

Published: Mar 6, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in PHPKit 1.6.1 RC2 allows remote attackers to inject arbitrary SQL commands via the catid parameter to include.php when the path parameter is set to faq/faq.php, and other unspecified vectors involving guestbook/print.php.

Affected (1)

Products: Phpkit: Phpkit

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Phpkit Phpkit	Version 1.6.1 rc2

References (14)

http://secunia.com/advisories/17479

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/2357

Source: cve@mitre.org

http://www.bb-pcsecurity.de/websecurity/532/org/PHPKit_1.6.1_RC2_%28faq-faq.php%29_Remote_SQL_Injection_Exploit.htm

Source: cve@mitre.org

http://www.osvdb.org/31265

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/451304/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/21002

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/30209

Source: cve@mitre.org

http://secunia.com/advisories/17479

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securityreason.com/securityalert/2357

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.bb-pcsecurity.de/websecurity/532/org/PHPKit_1.6.1_RC2_%28faq-faq.php%29_Remote_SQL_Injection_Exploit.htm

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/31265

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/451304/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/21002

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/30209

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.