CVE-2006-4606

no score yetEPSS 2.6%

Multiple SQL injection vulnerabilities in Longino Jacome php-Revista 1.1.2 allow remote attackers to execute arbitrary SQL commands via the (1) id_temas parameter in busqueda_tema.php, the (2) cadena parameter in busqueda.php, the (3) id_autor parameter in autor.php, the (4) email parameter in lista.php, and the (5) id_articulo parameter in articulo.php.

EPSS: 2.6% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
Published: 2006-09-07
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

longino:jacome_php-revista

References

http://secunia.com/advisories/21738
http://securityreason.com/securityalert/1499
http://www.attrition.org/pipermail/vim/2009-April/002167.html
http://www.osvdb.org/28445
http://www.osvdb.org/28446

Check your stack JSON