CVE-2006-0313

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-01-19 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in PDFdirectory before 1.0 allow remote attackers to execute arbitrary SQL commands via multiple unspecified vectors involving (1) util.php, (2) userpref.php, (3) user.php, (4) uploadfrm.php, (5) title.php, (6) team.php, (7) stats.php, (8) page.php, (9) org.php, (10) member.php, (11) index.php, (12) group.php, or (13) anniv.php.

Affected products

Pdfdirectory: 0.2.2, 0.2.3, 0.2.4, 0.2.5, 0.2.6, 0.2.7 (+4)

References

http://secunia.com/advisories/18459
http://sourceforge.net/project/shownotes.php?release_id=382411&group_id=122682
http://www.osvdb.org/22403
http://www.osvdb.org/22404
http://www.osvdb.org/22405
http://www.osvdb.org/22406
http://www.osvdb.org/22407
http://www.osvdb.org/22408
http://www.osvdb.org/22409
http://www.osvdb.org/22410
http://www.osvdb.org/22411
http://www.osvdb.org/22412

Get alerted when CVE-2006-0313 or the next vulnerability affects your stack