CVE-2006-3666

CVE-2006-3666 describes an SQL injection in AjaxPortal 3.0 where magic_quotes_gpc is disabled, enabling remote attackers to execute arbitrary SQL commands via the 'Search' field. The vulnerability is reported as a different issue from CVE-2006-3515. Affected product: AjaxPortal 3.0. The descripti...