Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
CVE coverage

CVE-2006-4575

CVSS 7.5 130 detections found
View on NVD →
Multiple SQL injection vulnerabilities in The Address Book 1.04e allow remote attackers to execute arbitrary SQL commands via the (1) lastname, (2) firstname, (3) passwordOld, (4) passwordNew, (5) id, (6) language, (7) defaultLetter, (8) newuserPass, (9) newuserType, (10) newuserEmail parameters in (a) user.php; the (11) goTo and (12) search parameters in (b) search.php; and the (13) groupAddName parameter in (c) save.php.

Detection rules

Source Rule Status Updated
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php passwordNew UNION SELECT rev 10 2020-11-02
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php lastname INSERT rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php lastname DELETE rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php lastname UPDATE rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php firstname SELECT rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php firstname UNION SELECT rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php firstname INSERT rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php firstname DELETE rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php firstname UPDATE rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php passwordOld SELECT rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php passwordOld UNION SELECT rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php passwordOld INSERT rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php passwordOld DELETE rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php passwordOld UPDATE rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php passwordNew SELECT rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php passwordNew INSERT rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php passwordNew DELETE rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php passwordNew UPDATE rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php id SELECT rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php id UNION SELECT rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php id INSERT rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php id DELETE rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php id UPDATE rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php language SELECT rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php language UNION SELECT rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php language INSERT rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php language DELETE rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php language UPDATE rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php defaultLetter SELECT rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php defaultLetter UNION SELECT rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php defaultLetter INSERT rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php defaultLetter DELETE rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php defaultLetter UPDATE rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php newuserPass SELECT rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php newuserPass UNION SELECT rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php newuserPass INSERT rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php newuserPass DELETE rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php newuserPass UPDATE rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php newuserType SELECT rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php newuserType UNION SELECT rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php newuserType INSERT rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php newuserType DELETE rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php newuserType UPDATE rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php newuserEmail SELECT rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php newuserEmail UNION SELECT rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php newuserEmail INSERT rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php newuserEmail DELETE rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php newuserEmail UPDATE rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- search.php goTo SELECT rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- search.php goTo UNION SELECT rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- search.php goTo INSERT rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- search.php goTo DELETE rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- search.php goTo UPDATE rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- search.php search SELECT rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- search.php search UNION SELECT rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- search.php search INSERT rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- search.php search DELETE rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- search.php search UPDATE rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- save.php groupAddName SELECT rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- save.php groupAddName UNION SELECT rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- save.php groupAddName INSERT rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- save.php groupAddName DELETE rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- save.php groupAddName UPDATE rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php lastname UNION SELECT rev 8 2020-09-09
suricata ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php lastname SELECT rev 8 2020-09-09
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php passwordNew UNION SELECT rev 7 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php lastname SELECT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php lastname UNION SELECT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php lastname INSERT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php lastname DELETE rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php lastname UPDATE rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php firstname SELECT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php firstname UNION SELECT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php firstname INSERT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php firstname DELETE rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php firstname UPDATE rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php passwordOld SELECT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php passwordOld UNION SELECT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php passwordOld INSERT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php passwordOld DELETE rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php passwordOld UPDATE rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php passwordNew SELECT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php passwordNew INSERT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php passwordNew DELETE rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php passwordNew UPDATE rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php id SELECT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php id UNION SELECT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php id INSERT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php id DELETE rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php id UPDATE rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php language SELECT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php language UNION SELECT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php language INSERT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php language DELETE rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php language UPDATE rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php defaultLetter SELECT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php defaultLetter UNION SELECT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php defaultLetter INSERT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php defaultLetter DELETE rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php defaultLetter UPDATE rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php newuserPass SELECT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php newuserPass UNION SELECT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php newuserPass INSERT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php newuserPass DELETE rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php newuserPass UPDATE rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php newuserType SELECT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php newuserType UNION SELECT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php newuserType INSERT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php newuserType DELETE rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php newuserType UPDATE rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php newuserEmail SELECT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php newuserEmail UNION SELECT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php newuserEmail INSERT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php newuserEmail DELETE rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- user.php newuserEmail UPDATE rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- search.php goTo SELECT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- search.php goTo UNION SELECT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- search.php goTo INSERT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- search.php goTo DELETE rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- search.php goTo UPDATE rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- search.php search SELECT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- search.php search UNION SELECT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- search.php search INSERT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- search.php search DELETE rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- search.php search UPDATE rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- save.php groupAddName SELECT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- save.php groupAddName UNION SELECT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- save.php groupAddName INSERT rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- save.php groupAddName DELETE rev 6 2019-08-22
snort ET WEB_SPECIFIC_APPS The Address Book SQL Injection Attempt -- save.php groupAddName UPDATE rev 6 2019-08-22