CVE-2006-0774

SQL injection vulnerability in deleteSession() in DB_eSession library 1.0.2 and earlier, as used in multiple products, allows remote attackers to execute…

published February 19, 2006

CVSS
—
EPSS
2%
Percentile
79.2
In the wild
Unconfirmed
What it is

SQL injection vulnerability in deleteSession() in DB_eSession library 1.0.2 and earlier, as used in multiple products, allows remote attackers to execute arbitrary SQL commands via the $_sess_id_set variable, which is usually derived from PHPSESSID.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01870 · 79.2th percentile
Published
2006-02-19T00:00Z
EPSS history
Timeline
  • 19 FEB 00:00Z
    SQL injection vulnerability in deleteSession() in DB_eSession library 1.0.2 and earlier, as used in multiple products, allows remote attackers to execute…
    cvelistv5