CVE-2006-5287 in Xeobook
Summary
Multiple SQL injection vulnerabilities in sign.php in Xeobook 0.93 allow remote attackers to execute arbitrary SQL commands via (1) the User-Agent HTTP header, or the (2) gb_entry_text, (3) gb_location, (4) gb_fullname, or (5) gb_sex parameters.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
10/13/2006
Disclosure
10/13/2006
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 32743 | Xeobook sign.php sql injection | 89 | High | Unavailable | CVE-2006-5287 |