{"id":"CVE-2006-0939","aliases":["EUVD-2006-0942","GHSA-24pw-p8jc-r7j5"],"status":"published","title":"SQL injection vulnerability in DCI-Taskeen 1.03 allows remote attackers to execute arbitrary SQL...","description":"SQL injection vulnerability in DCI-Taskeen 1.03 allows remote attackers to execute arbitrary SQL commands via the (1) id or (2) action parameter to (a) basket.php, or (3) id or (4) page parameter to (b) cat.php.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01167,"percentile":0.67543,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2006-03-01T02:00:00Z","modified":"2026-06-16T22:21:36Z","exploits":[{"source":"exploitdb","id":"EDB-27313","title":"DCI-Taskeen 1.03 - 'basket.php' Multiple SQL Injections","type":"webapps","platform":"php","date":"2006-02-25","verified":true,"url":"https://www.exploit-db.com/exploits/27313"},{"source":"exploitdb","id":"EDB-27314","title":"DCI-Taskeen 1.03 - 'cat.php' Multiple SQL Injections","type":"webapps","platform":"php","date":"2006-02-25","verified":true,"url":"https://www.exploit-db.com/exploits/27314"}],"products":[{"vendor":"dci-designs","product":"dci-taskeen"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24963","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/426082","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Exploit"]},{"url":"http://www.securityfocus.com/bid/16828","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit"]},{"url":"http://securityreason.com/securityalert/495","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"]},{"url":"http://securitytracker.com/id?1015685","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-0939"},{"url":"https://github.com/advisories/GHSA-24pw-p8jc-r7j5"}],"sources":{"cve":[{"id":"CVE-2006-0939","description":"SQL injection vulnerability in DCI-Taskeen 1.03 allows remote attackers to execute arbitrary SQL commands via the (1) id or (2) action parameter to (a) basket.php, or (3) id or (4) page parameter to (b) cat.php.","status":"published","published":"2006-03-01T02:00:00Z","modified":"2024-08-07T16:56:13.864Z","updated_at":"2026-11-02T14:33:53.295018Z"}],"euvd":[{"id":"EUVD-2006-0942","description":"SQL injection vulnerability in DCI-Taskeen 1.03 allows remote attackers to execute arbitrary SQL commands via the (1) id or (2) action parameter to (a) basket.php, or (3) id or (4) page parameter to (b) cat.php.","status":"published","published":"2006-03-01T02:00:00Z","modified":"2024-08-07T16:56:13Z","updated_at":"2026-11-03T01:16:07.154815Z"}],"ghsa":[{"id":"GHSA-24pw-p8jc-r7j5","title":"SQL injection vulnerability in DCI-Taskeen 1.03 allows remote attackers to execute arbitrary SQL...","description":"SQL injection vulnerability in DCI-Taskeen 1.03 allows remote attackers to execute arbitrary SQL commands via the (1) id or (2) action parameter to (a) basket.php, or (3) id or (4) page parameter to (b) cat.php.","status":"published","published":"2022-05-01T06:44:17Z","modified":"2023-01-31T05:00:44Z","updated_at":"2026-11-02T14:47:55.156502Z"}],"nvd":[{"id":"CVE-2006-0939","description":"SQL injection vulnerability in DCI-Taskeen 1.03 allows remote attackers to execute arbitrary SQL commands via the (1) id or (2) action parameter to (a) basket.php, or (3) id or (4) page parameter to (b) cat.php.","status":"published","published":"2006-03-01T02:02:00Z","modified":"2026-06-16T22:21:36.023Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:01:00.920802Z"}]}}