CVE-2006-4529 | Vulnerability Database | Aqua Security

SQL injection vulnerability in recherchemembre.php in membrepass 1.5. allows remote attackers to execute arbitrary SQL commands via the recherche parameter.

Affected Software

Name	Vendor	Start Version	End Version
Membrepass	Membrepass	1.5 (including)	1.5 (including)

References

http://acid-root.new.fr/advisories/09290806.txt
http://secunia.com/advisories/21715
http://securityreason.com/securityalert/1487
http://www.securityfocus.com/archive/1/444845/100/0/threaded
http://www.securityfocus.com/bid/19791
http://www.vupen.com/english/advisories/2006/3427
https://exchange.xforce.ibmcloud.com/vulnerabilities/28690
http://acid-root.new.fr/advisories/09290806.txt
http://secunia.com/advisories/21715
http://securityreason.com/securityalert/1487
http://www.securityfocus.com/archive/1/444845/100/0/threaded
http://www.securityfocus.com/bid/19791
http://www.vupen.com/english/advisories/2006/3427
https://exchange.xforce.ibmcloud.com/vulnerabilities/28690

NVD	https://nvd.nist.gov/vuln/detail/CVE-2006-4529
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html