CVE-2006-1853

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.00%

Published

Apr 19, 2006

Modified

Jun 16, 2026

Public PoC / Exploit (1)

All weaponized →

Exploit-DBModernBill 4.3 - 'user.php' SQL Injection

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple SQL injection vulnerabilities in ModernBill 4.3.2 and earlier allow remote attackers or administrators to execute arbitrary SQL commands via the (1) id parameter in (a) user.php, or (2) where and (3) order parameters to (b) admin.php.

Affected Products (1)

moderngigabyte · modernbillvulnerable

References (10)

http://pridels0.blogspot.com/2006/04/modernbill-multiple-sql-inj-vuln.html

http://secunia.com/advisories/19641

http://www.securityfocus.com/bid/17596

http://www.vupen.com/english/advisories/2006/1415

https://exchange.xforce.ibmcloud.com/vulnerabilities/25926

http://pridels0.blogspot.com/2006/04/modernbill-multiple-sql-inj-vuln.html

http://secunia.com/advisories/19641

http://www.securityfocus.com/bid/17596

http://www.vupen.com/english/advisories/2006/1415

https://exchange.xforce.ibmcloud.com/vulnerabilities/25926

KEV Catalog EPSS Scores Vendors All CVEs