{"id":"CVE-2006-3926","aliases":["EUVD-2006-3920","GHSA-cpgr-qc8h-2jj6"],"status":"published","title":"Multiple SQL injection vulnerabilities in PhpProBid 5.24 allow remote attackers to execute...","description":"Multiple SQL injection vulnerabilities in PhpProBid 5.24 allow remote attackers to execute arbitrary SQL commands via the (1) view or (2) start parameters to (a) viewfeedback.php or the (3) orderType parameter to (b) categories.php.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01739,"percentile":0.77869,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2006-07-31T21:00:00Z","modified":"2026-06-16T22:28:05Z","exploits":[{"source":"exploitdb","id":"EDB-28275","title":"PHP Pro Bid 5.2.4 - 'viewfeedback.php' Multiple SQL Injections","type":"webapps","platform":"php","date":"2006-07-25","verified":true,"url":"https://www.exploit-db.com/exploits/28275"},{"source":"exploitdb","id":"EDB-28276","title":"PHP Pro Bid 5.2.4 - 'categories.php?orderType' SQL Injection","type":"webapps","platform":"php","date":"2006-07-25","verified":true,"url":"https://www.exploit-db.com/exploits/28276"}],"products":[{"vendor":"php_pro_bid","product":"php_pro_bid"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/28032","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://securitytracker.com/id?1016595","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Exploit"]},{"url":"http://www.osvdb.org/27546","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.osvdb.org/27545","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://secunia.com/advisories/21201","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/19158","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2006-07/0474.html","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Exploit"]},{"url":"http://securityreason.com/securityalert/1298","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-3926"},{"url":"https://github.com/advisories/GHSA-cpgr-qc8h-2jj6"}],"sources":{"cve":[{"id":"CVE-2006-3926","description":"Multiple SQL injection vulnerabilities in PhpProBid 5.24 allow remote attackers to execute arbitrary SQL commands via the (1) view or (2) start parameters to (a) viewfeedback.php or the (3) orderType parameter to (b) categories.php.","status":"published","published":"2006-07-31T21:00:00Z","modified":"2024-08-07T18:48:39.41Z","updated_at":"2026-11-02T14:33:49.62488Z"}],"euvd":[{"id":"EUVD-2006-3920","description":"Multiple SQL injection vulnerabilities in PhpProBid 5.24 allow remote attackers to execute arbitrary SQL commands via the (1) view or (2) start parameters to (a) viewfeedback.php or the (3) orderType parameter to (b) categories.php.","status":"published","published":"2006-07-31T21:00:00Z","modified":"2024-08-07T18:48:39Z","updated_at":"2026-11-03T01:15:53.967777Z"}],"ghsa":[{"id":"GHSA-cpgr-qc8h-2jj6","title":"Multiple SQL injection vulnerabilities in PhpProBid 5.24 allow remote attackers to execute...","description":"Multiple SQL injection vulnerabilities in PhpProBid 5.24 allow remote attackers to execute arbitrary SQL commands via the (1) view or (2) start parameters to (a) viewfeedback.php or the (3) orderType parameter to (b) categories.php.","status":"published","published":"2022-05-01T07:13:42Z","modified":"2023-01-31T05:01:45Z","updated_at":"2026-11-02T14:48:07.307943Z"}],"nvd":[{"id":"CVE-2006-3926","description":"Multiple SQL injection vulnerabilities in PhpProBid 5.24 allow remote attackers to execute arbitrary SQL commands via the (1) view or (2) start parameters to (a) viewfeedback.php or the (3) orderType parameter to (b) categories.php.","status":"published","published":"2006-07-31T21:04:00Z","modified":"2026-06-16T22:28:05.69Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:01:05.130518Z"}]}}