Search vulnerabilities

Results 2

Export CSV
CVE-2006-5606

Multiple SQL injection vulnerabilities in BytesFall Explorer (bfExplorer) 0.0.7.1 and earlier allow remote attackers to execute arbitrary SQL commands via the username ($User variable) to login/doLogin.php and other unspecified vectors.

CVSS 2.0 · 7.5 High EPSS 1.5% KEV · Not listed
CVE-2006-5719

SQL injection vulnerability in libs/sessions.lib.php in BytesFall Explorer (bfExplorer) 0.0.6 allows remote attackers to execute arbitrary SQL commands via unspecified parameters, a different issue than CVE-2006-5606.

CVSS 2.0 · 7.5 High EPSS 1.2% KEV · Not listed