CVEs-PoC/2006/CVE-2006-0775.md

CVE-2006-0775

Description

Multiple SQL injection vulnerabilities in show.php in BirthSys 3.1 allow remote attackers to execute arbitrary SQL commands via the $month variable. NOTE: a vector regarding the $date parameter and data.php (date.php) was originally reported, but this appears to be in error.

POC

Reference

• http://securityreason.com/securityalert/467
• http://securityreason.com/securityalert/467
• http://www.evuln.com/vulns/74/summary.html
• http://www.evuln.com/vulns/74/summary.html

Github

No PoCs found on GitHub currently.