CVE-2006-3154

CVE-2006-3154 describes an SQL injection in index.pl of Ultimate Estate 1.0 and earlier, exploitable via the id parameter. The vulnerability allows remote attackers to potentially execute arbitrary SQL commands, with a CVSS v2 base score of 7.5 (HIGH) and network/low complexity exposure with no a...