CVE-2006-6090

2006-11-2418:00:00

mitre

www.cve.org

AI Score

8.7

Confidence

Low

EPSS

0.007

Percentile

80.3%

JSON

Multiple SQL injection vulnerabilities in BaalAsp forum allow remote attackers to execute arbitrary SQL commands via the (1) password parameter to (a) adminlogin.asp, the (2) name or (3) password parameter to (b) userlogin.asp, or the (3) search parameter to search.asp.

References

s-a-p.ca/index.php?page=OurAdvisories&id=35

secunia.com/advisories/22943

securityreason.com/securityalert/1913

www.securityfocus.com/archive/1/451846/100/100/threaded

www.securityfocus.com/bid/21111

www.vupen.com/english/advisories/2006/4579

exchange.xforce.ibmcloud.com/vulnerabilities/30342

exchange.xforce.ibmcloud.com/vulnerabilities/30343