← Database

CVE-2006-4957

HIGH CVSS: 7.5 Published: 2006-09-23 Modified: 2026-06-16

Description

SQL injection vulnerability in the GetMember function in functions.php in MyReview 1.9.4 allows remote attackers to execute arbitrary SQL commands via the email parameter to Admin.php.

Affected Platforms

The Myreview System Myreview

Weakness Type

NVD-CWE-Other

References