{
    "id": "CVE-2006-3926",
    "published": "2006-07-31 21:04:00",
    "last_modified": "2026-06-16 22:28:05",
    "cvss_score": "7.5",
    "cvss_severity": "HIGH",
    "cvss_version": "2.0",
    "cvss_vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
    "cwe": null,
    "description": "Multiple SQL injection vulnerabilities in PhpProBid 5.24 allow remote attackers to execute arbitrary SQL commands via the (1) view or (2) start parameters to (a) viewfeedback.php or the (3) orderType parameter to (b) categories.php.",
    "epss_score": "0.01739",
    "epss_percentile": "0.77065",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-10-10 18:17:04",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "php_pro_bid",
            "product": "php_pro_bid"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "28275",
            "title": "PHP Pro Bid 5.2.4 - 'viewfeedback.php' Multiple SQL Injections",
            "date": "2006-07-25",
            "url": "https://www.exploit-db.com/exploits/28275"
        },
        {
            "source": "exploit-db",
            "ref_id": "28276",
            "title": "PHP Pro Bid 5.2.4 - 'categories.php?orderType' SQL Injection",
            "date": "2006-07-25",
            "url": "https://www.exploit-db.com/exploits/28276"
        }
    ],
    "refs_list": [
        "http://archives.neohapsis.com/archives/bugtraq/2006-07/0474.html",
        "http://secunia.com/advisories/21201",
        "http://securityreason.com/securityalert/1298",
        "http://securitytracker.com/id?1016595",
        "http://www.osvdb.org/27545",
        "http://www.osvdb.org/27546",
        "http://www.securityfocus.com/bid/19158",
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/28032",
        "http://archives.neohapsis.com/archives/bugtraq/2006-07/0474.html",
        "http://secunia.com/advisories/21201",
        "http://securityreason.com/securityalert/1298",
        "http://securitytracker.com/id?1016595",
        "http://www.osvdb.org/27545",
        "http://www.osvdb.org/27546",
        "http://www.securityfocus.com/bid/19158",
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/28032"
    ]
}