{"id":"CVE-2006-2742","state":"PUBLISHED","title":"SQL injection vulnerability in Drupal 4.6.x before 4.6.7 and 4.7.0 allows remote attackers to execute arbitrary SQL commands via the (1) count and (2) from variables to (a) databas","description":"SQL injection vulnerability in Drupal 4.6.x before 4.6.7 and 4.7.0 allows remote attackers to execute arbitrary SQL commands via the (1) count and (2) from variables to (a) database.mysql.inc, (b) database.pgsql.inc, and (c) database.mysqli.inc.","publishedAt":"2006-06-01T10:00:00.000Z","updatedAt":"2024-08-07T17:58:51.927Z","severity":null,"assigner":"mitre","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["http://secunia.com/advisories/20140","http://drupal.org/node/65357","http://www.securityfocus.com/bid/18245","http://www.vupen.com/english/advisories/2006/1975","http://www.debian.org/security/2006/dsa-1125","http://secunia.com/advisories/21244","http://www.securityfocus.com/archive/1/435790/100/0/threaded","https://exchange.xforce.ibmcloud.com/vulnerabilities/26654"],"weaknesses":[],"ingestedAt":"2026-10-29T19:27:43.610Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2006/2xxx/CVE-2006-2742.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2006-2742","state":"PUBLISHED","datePublished":"2006-06-01T10:00:00.000Z","dateUpdated":"2024-08-07T17:58:51.927Z","assignerShortName":"mitre","assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateReserved":"2006-06-01T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Drupal 4.6.x before 4.6.7 and 4.7.0 allows remote attackers to execute arbitrary SQL commands via the (1) count and (2) from variables to (a) database.mysql.inc, (b) database.pgsql.inc, and (c) database.mysqli.inc."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"http://secunia.com/advisories/20140","name":"20140","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://drupal.org/node/65357","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securityfocus.com/bid/18245","name":"18245","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.vupen.com/english/advisories/2006/1975","name":"ADV-2006-1975","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"http://www.debian.org/security/2006/dsa-1125","name":"DSA-1125","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"http://secunia.com/advisories/21244","name":"21244","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.securityfocus.com/archive/1/435790/100/0/threaded","name":"20060602 [DRUPAL-SA-2006-005] Drupal 4.6.7 / 4.7.1 fixes SQL injection issue","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/26654","name":"drupal-database-sql-injection(26654)","tags":["vdb-entry","x_refsource_XF"]}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"mitre","dateUpdated":"2018-10-18T14:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca"},"datePublic":"2006-05-18T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-2742","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"SQL injection vulnerability in Drupal 4.6.x before 4.6.7 and 4.7.0 allows remote attackers to execute arbitrary SQL commands via the (1) count and (2) from variables to (a) database.mysql.inc, (b) database.pgsql.inc, and (c) database.mysqli.inc."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"20140","refsource":"SECUNIA","url":"http://secunia.com/advisories/20140"},{"name":"http://drupal.org/node/65357","refsource":"CONFIRM","url":"http://drupal.org/node/65357"},{"name":"18245","refsource":"BID","url":"http://www.securityfocus.com/bid/18245"},{"name":"ADV-2006-1975","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2006/1975"},{"name":"DSA-1125","refsource":"DEBIAN","url":"http://www.debian.org/security/2006/dsa-1125"},{"name":"21244","refsource":"SECUNIA","url":"http://secunia.com/advisories/21244"},{"name":"20060602 [DRUPAL-SA-2006-005] Drupal 4.6.7 / 4.7.1 fixes SQL injection issue","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/435790/100/0/threaded"},{"name":"drupal-database-sql-injection(26654)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/26654"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://secunia.com/advisories/20140","name":"20140","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://drupal.org/node/65357","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securityfocus.com/bid/18245","name":"18245","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2006/1975","name":"ADV-2006-1975","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://www.debian.org/security/2006/dsa-1125","name":"DSA-1125","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://secunia.com/advisories/21244","name":"21244","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/435790/100/0/threaded","name":"20060602 [DRUPAL-SA-2006-005] Drupal 4.6.7 / 4.7.1 fixes SQL injection issue","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/26654","name":"drupal-database-sql-injection(26654)","tags":["vdb-entry","x_refsource_XF","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-07T17:58:51.927Z"}}]}}}