Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2006-3994

EPSS 0.60% · P70
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2006-3994

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
SQL injection vulnerability in the u2u_send_recp function in u2u.inc.php in XMB (aka extreme message board) 1.9.6 Alpha and earlier allows remote attackers to execute arbitrary SQL commands via the u2uid parameter to u2u.php, which is directly accessed from $_POST and bypasses the protection scheme.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
XMB Forum U2UID 'u2u.inc.php' SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
XMB (extreme message board) 1.9.6 Alpha及早期版本中u2u.inc.php脚本的u2u_send_recp函数存在SQL注入漏洞，远程攻击者可借助提交到u2u.php脚本的u2uid参数执行任意SQL指令，此参数可由$_POST数组变量直接访问，并绕过保护机制。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2006-3994

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2006-3994

请登录查看更多情报信息。

Same Patch Batch · n/a · 2006-08-05 · 31 CVEs total

CVE-2006-3981Mambo Mambo Gallery Manager 'about.mgm.php'PHP远程文件包含漏洞
CVE-2006-3996Atutor 'index.php'多个SQL注入漏洞
CVE-2006-3995Mambo或Joomla软件 User Home Pages 'UHP_CONFIG.PHP'远程文件包含漏洞
CVE-2006-3993The Search Engine Project (TSEP) 'colorswitch.php'远程文件包含漏洞
CVE-2006-3992Intel PRO/Wireless网络连接驱动远程代码执行漏洞
CVE-2006-3991Voodoo Chat 'index.php' File_Path参数远程文件包含漏洞
CVE-2006-3990Paul M. Jones Savant2 多个PHP远程文件包含漏洞
CVE-2006-3989Knusperleicht ShoutBox SB_INCLUDE_PATH参数远程文件包含漏洞
CVE-2006-3988Knusperleicht NewsReporter 'index.php' News_include_path远程文件包含漏洞
CVE-2006-3987Knusperleicht FileManager 'index.php' PHP远程文件包含漏洞
CVE-2006-3986Knusperleicht NewsLetter 'Index.PHP' 远程文件包含漏洞
CVE-2006-3985ConeXware PowerArchiver 'DZIPS32.DLL文件'栈缓冲区溢出漏洞
CVE-2006-3984PHPAuction 'view.inc.php' PHPAds_Path变量远程文件包含漏洞
CVE-2006-3983PHPReactor 'EditProfile.PHP'远程文件包含漏洞
CVE-2006-3982Knusperleicht Quickie 'quickie.php' Quick_Path参数远程文件包含漏洞
CVE-2005-0985Mac OS X 未明漏洞
CVE-2006-3980Mambo Gallery Manager 'help.mgm.php' MosConfig_Absolute_Path远程文件包含漏洞
CVE-2006-3457Symantec On-Demand Agent(SODA)和Symantec On-Demand Protection(SODP)加密数据信息泄露漏洞
CVE-2006-4001Barracuda Spam Firewall垃圾邮件防火墙 'preview_email.cg' 脚本未明安全漏洞
CVE-2006-4000Barracuda Networks垃圾邮件防火墙安全泄露漏洞

Showing top 20 of 31 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2006-3994

No comments yet

Leave a comment