CVE-2006-4347

SQL injection vulnerability in user logon authentication request handling in CoolCoolD.exe in Cool Manager 5.0 5,60,90,28 and Cool Messenger Office/School Server 5.5 5,65,12,13 allows remote attackers to execute arbitrary SQL commands via the username field...

CVE-2006-4347

SQL injection vulnerability in user logon authentication request handling in CoolCoolD.exe in Cool Manager 5.0 5,60,90,28 and Cool Messenger Office/School Server 5.5 5,65,12,13 allows remote attackers to execute arbitrary SQL commands via the username field...

[Full-disclosure] [vuln.sg] Cool Messenger Server SQL Injection Vulnerability

vuln.sg Vulnerability Research Advisory Cool Messenger Server SQL Injection Vulnerability by Tan Chew Keong Release Date: 2006-08-23 Summary ------- A vulnerability has been found in Cool Messenger Office/School Server. When exploited, the vulnerability allows any people to logon to the messenger...