{"api_version":"1","generated_at":"2026-07-23T12:25:53+00:00","cve":"CVE-2006-0608","urls":{"html":"https://cve.report/CVE-2006-0608","api":"https://cve.report/api/cve/CVE-2006-0608.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-0608","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-0608"},"summary":{"title":"CVE-2006-0608","description":"Multiple SQL injection vulnerabilities in Hinton Design phphd 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the username parameter to check.php or (2) unknown attack vectors to scripts that display information from the database.","state":"PUBLISHED","assigner":"mitre","published_at":"2006-02-08 23:02:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.securityfocus.com/archive/1/424827/100/0/threaded","name":"http://www.securityfocus.com/archive/1/424827/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/18793","name":"http://secunia.com/advisories/18793","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"phphd Multiple Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/23028","name":"http://www.osvdb.org/23028","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.evuln.com/vulns/60/summary.html","name":"http://www.evuln.com/vulns/60/summary.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"],"title":"eVuln.com - phphd Multiple Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/23025","name":"http://www.osvdb.org/23025","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24508","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24508","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/16586","name":"http://www.securityfocus.com/bid/16586","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Hinton Design PHPHD Multiple Input Validation And Authentication Bypass Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24515","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24515","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-0608","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-0608","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"608","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hinton_design","cpe5":"phphd","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2006","cve_id":"608","cve":"CVE-2006-0608","epss":"0.014080000","percentile":"0.805110000","score_date":"2026-04-16","updated_at":"2026-04-17 00:09:25"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T16:41:29.004Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"18793","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/18793"},{"name":"phphd-multiple-sql-injection(24515)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24515"},{"name":"16586","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/16586"},{"name":"20060212 [eVuln] phphd Multiple Vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/424827/100/0/threaded"},{"name":"23025","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/23025"},{"name":"23028","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/23028"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.evuln.com/vulns/60/summary.html"},{"name":"phphd-check-sql-injection(24508)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24508"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2006-02-04T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Hinton Design phphd 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the username parameter to check.php or (2) unknown attack vectors to scripts that display information from the database."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-19T14:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"18793","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/18793"},{"name":"phphd-multiple-sql-injection(24515)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24515"},{"name":"16586","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/16586"},{"name":"20060212 [eVuln] phphd Multiple Vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/424827/100/0/threaded"},{"name":"23025","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/23025"},{"name":"23028","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/23028"},{"tags":["x_refsource_MISC"],"url":"http://www.evuln.com/vulns/60/summary.html"},{"name":"phphd-check-sql-injection(24508)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24508"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-0608","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple SQL injection vulnerabilities in Hinton Design phphd 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the username parameter to check.php or (2) unknown attack vectors to scripts that display information from the database."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"18793","refsource":"SECUNIA","url":"http://secunia.com/advisories/18793"},{"name":"phphd-multiple-sql-injection(24515)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24515"},{"name":"16586","refsource":"BID","url":"http://www.securityfocus.com/bid/16586"},{"name":"20060212 [eVuln] phphd Multiple Vulnerabilities","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/424827/100/0/threaded"},{"name":"23025","refsource":"OSVDB","url":"http://www.osvdb.org/23025"},{"name":"23028","refsource":"OSVDB","url":"http://www.osvdb.org/23028"},{"name":"http://www.evuln.com/vulns/60/summary.html","refsource":"MISC","url":"http://www.evuln.com/vulns/60/summary.html"},{"name":"phphd-check-sql-injection(24508)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24508"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2006-0608","datePublished":"2006-02-08T23:00:00.000Z","dateReserved":"2006-02-08T00:00:00.000Z","dateUpdated":"2024-08-07T16:41:29.004Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2006-02-08 23:02:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hinton_design:phphd:1.0:*:*:*:*:*:*:*","matchCriteriaId":"67D57F20-01A0-4472-8561-AEA7DDB30BE3"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"608","Ordinal":"1","Title":"CVE-2006-0608","CVE":"CVE-2006-0608","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"608","Ordinal":"1","NoteData":"Multiple SQL injection vulnerabilities in Hinton Design phphd 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the username parameter to check.php or (2) unknown attack vectors to scripts that display information from the database.","Type":"Description","Title":"CVE-2006-0608"},{"CveYear":"2006","CveId":"608","Ordinal":"2","NoteData":"2006-02-08","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"608","Ordinal":"3","NoteData":"2018-10-19","Type":"Other","Title":"Modified"}]}}}