Lucene search
MitreCVELIST:CVE-2006-2046HistoryApr 26, 2006 - 8:00 p.m.
CVE-2006-2046
2006-04-2620:00:00
mitre
www.cve.org
3
Multiple SQL injection vulnerabilities in Application Dynamics Cartweaver ColdFusion 2.16.11 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) category and (2) keywords parameters in (a) Results.cfm, and the (3) ProdID parameter in (b) Details.cfm.
References
pridels0.blogspot.com/2006/04/cartweaver-coldfusion-vuln.html
secunia.com/advisories/19812
www.osvdb.org/24961
www.osvdb.org/24962
www.securityfocus.com/bid/17941
www.securityfocus.com/bid/25210
www.techfeed.net/blog/index.cfm/2006/4/26/cartweaver-holes
www.vupen.com/english/advisories/2006/1513
exchange.xforce.ibmcloud.com/vulnerabilities/26060
www.exploit-db.com/exploits/4264
Related
nvd
nvd
CVE-2006-2046
2006-04-26 20:06:00
CVE-2008-2918
2008-06-30 18:24:00
prion
prion
Sql injection
2006-04-26 20:06:00
Sql injection
2008-06-30 18:24:00
cve
cve
CVE-2006-2046
2006-04-26 20:06:00
CVE-2008-2918
2008-06-30 18:24:00
exploitdb
exploitdb
Cartweaver 2.16.11 - 'Results.cfm' SQL Injection
2006-04-25 00:00:00
Cartweaver 2.16.11 - 'ProdID' SQL Injection
2007-08-06 00:00:00
Cartweaver 2.16.11 Details.cfm ProdID Parameter SQL Injection
2006-04-25 00:00:00
cvelist
cvelist
CVE-2008-2918
2008-06-30 18:00:00