Vulnerability Description
Multiple SQL injection vulnerabilities in Carey Briggs PHP/MYSQL Timesheet 1 and 2 allow remote attackers to execute arbitrary SQL commands via the (1) yr, (2) month, (3) day, and (4) job parameters in (a) index.php and (b) changehrs.php.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Carey Briggs | Php Mysql Timesheet | 1 |
Related Weaknesses (CWE)
References
- http://secunia.com/advisories/18822
- http://securityreason.com/securityalert/451
- http://www.evuln.com/vulns/67/summary.htmlVendor Advisory
- http://www.securityfocus.com/archive/1/425316/100/0/threaded
- http://www.securityfocus.com/bid/16620
- http://www.vupen.com/english/advisories/2006/0522
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24567
- http://secunia.com/advisories/18822
- http://securityreason.com/securityalert/451
- http://www.evuln.com/vulns/67/summary.htmlVendor Advisory
- http://www.securityfocus.com/archive/1/425316/100/0/threaded
- http://www.securityfocus.com/bid/16620
- http://www.vupen.com/english/advisories/2006/0522
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24567
FAQ
What is CVE-2006-0692?
CVE-2006-0692 is a vulnerability with a CVSS score of 7.5 (HIGH). Multiple SQL injection vulnerabilities in Carey Briggs PHP/MYSQL Timesheet 1 and 2 allow remote attackers to execute arbitrary SQL commands via the (1) yr, (2) month, (3) day, and (4) job parameters i...
How severe is CVE-2006-0692?
CVE-2006-0692 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2006-0692?
Check the references section above for vendor advisories and patch information. Affected products include: Carey Briggs Php Mysql Timesheet.