← Database

CVE-2006-1481

MEDIUM CVSS: 6.5 Published: 2006-03-29 Modified: 2026-06-16

Description

SQL injection vulnerability in search.php in PHP Ticket 0.71 allows remote authenticated users to execute arbitrary SQL commands and obtain usernames and passwords via the frm_search_in parameter.

Affected Platforms

Php Ticket Php Ticket

Weakness Type

NVD-CWE-Other

References