CVE coverage

CVE-2006-7115

CVSS 7.5 10 detections found

SQL injection vulnerability in PHPKit 1.6.1 RC2 allows remote attackers to inject arbitrary SQL commands via the catid parameter to include.php when the path parameter is set to faq/faq.php, and other unspecified vectors involving guestbook/print.php.

Detection rules

Source	Rule	Status	Updated
suricata	ET WEB_SPECIFIC_APPS PHPKit SQL Injection Attempt -- include.php catid SELECT	rev 8	2020-09-08
suricata	ET WEB_SPECIFIC_APPS PHPKit SQL Injection Attempt -- include.php catid UNION SELECT	rev 8	2020-09-08
suricata	ET WEB_SPECIFIC_APPS PHPKit SQL Injection Attempt -- include.php catid INSERT	rev 8	2020-09-08
suricata	ET WEB_SPECIFIC_APPS PHPKit SQL Injection Attempt -- include.php catid DELETE	rev 8	2020-09-08
suricata	ET WEB_SPECIFIC_APPS PHPKit SQL Injection Attempt -- include.php catid UPDATE	rev 8	2020-09-08
snort	ET WEB_SPECIFIC_APPS PHPKit SQL Injection Attempt -- include.php catid SELECT	rev 6	2019-08-22
snort	ET WEB_SPECIFIC_APPS PHPKit SQL Injection Attempt -- include.php catid UNION SELECT	rev 6	2019-08-22
snort	ET WEB_SPECIFIC_APPS PHPKit SQL Injection Attempt -- include.php catid INSERT	rev 6	2019-08-22
snort	ET WEB_SPECIFIC_APPS PHPKit SQL Injection Attempt -- include.php catid DELETE	rev 6	2019-08-22
snort	ET WEB_SPECIFIC_APPS PHPKit SQL Injection Attempt -- include.php catid UPDATE	rev 6	2019-08-22