CVE-2006-0608

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-02-08 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in Hinton Design phphd 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the username parameter to check.php or (2) unknown attack vectors to scripts that display information from the database.

Affected products

Hinton Design Phphd: 1.0

References

http://secunia.com/advisories/18793
http://www.evuln.com/vulns/60/summary.html
http://www.osvdb.org/23025
http://www.osvdb.org/23028
http://www.securityfocus.com/archive/1/424827/100/0/threaded
http://www.securityfocus.com/bid/16586
https://exchange.xforce.ibmcloud.com/vulnerabilities/24508
https://exchange.xforce.ibmcloud.com/vulnerabilities/24515
http://secunia.com/advisories/18793
http://www.evuln.com/vulns/60/summary.html
http://www.osvdb.org/23025
http://www.osvdb.org/23028

Get alerted when CVE-2006-0608 or the next vulnerability affects your stack