CVE-2006-3576

The CVE-2006-3576 entry describes a SQL injection in SenseSites CommonSense CMS 5.0, exploitable via the Date parameter in search.php. Affected component: search.php within CommonSense CMS 5.0. Root cause: improper handling of user-supplied input (Date parameter) leading to arbitrary SQL executio...