CVE-2006-0313 json
Multiple SQL injection vulnerabilities in PDFdirectory before 1.0 allow remote attackers to execute arbitrary SQL commands via multiple uns…
published 2006-01-19 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-0320
- cvss
- 7.5
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 2.0%
- EPSS 2.0% chance of exploitation in 30 days, percentile 80%
- public exploits
- 0
- none known
Summary
Multiple SQL injection vulnerabilities in PDFdirectory before 1.0 allow remote attackers to execute arbitrary SQL commands via multiple unspecified vectors involving (1) util.php, (2) userpref.php, (3) user.php, (4) uploadfrm.php, (5) title.php, (6) team.php, (7) stats.php, (8) page.php, (9) org.php, (10) member.php, (11) index.php, (12) group.php, or (13) anniv.php.
Patch / fix
- osvdb.org/22412 patch
- osvdb.org/22407 patch
- osvdb.org/22405 patch
- osvdb.org/22411 patch
- sourceforge.net/project/shownotes.php?release_id=382411&group_id=122682 patch
- securityfocus.com/bid/16273 patch
- osvdb.org/22404 patch
- osvdb.org/22403 patch
- osvdb.org/22410 patch
- osvdb.org/22409 patch
Exploit prediction
1.96% chance of exploitation in the next 30 days, higher than 80% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
References
-
osvdb.org
/22412
vdb-entry, patch
-
osvdb.org
/22407
vdb-entry, patch
-
osvdb.org
/22405
vdb-entry, patch
-
osvdb.org
/22411
vdb-entry, patch
-
sourceforge.net
/project/shownotes.php?release_id=382411&group_id=122682
patch
-
securityfocus.com
/bid/16273
vdb-entry, patch
-
osvdb.org
/22404
vdb-entry, patch
-
secunia.com
/advisories/18459
third-party-advisory, patch, vendor-advisory
-
osvdb.org
/22403
vdb-entry, patch
-
osvdb.org
/22410
vdb-entry, patch
-
osvdb.org
/22409
vdb-entry, patch
-
osvdb.org
/22406
vdb-entry, patch
-
osvdb.org
/22408
vdb-entry, patch
-
osvdb.org
/22414
vdb-entry, patch
-
osvdb.org
/22415
vdb-entry, patch
-
osvdb.org
/22413
vdb-entry, patch
-
vupen.com
/english/advisories/2006/0231
vdb-entry
Sources
- CVE List CVE-2006-0313
- NVD CVE-2006-0313
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.