CVE-2006-5798

The CVE-2006-5798 entry describes a SQL injection vulnerability in default.asp of the Xenis.creator CMS, exploitable via the contid parameter to allow remote execution of arbitrary SQL commands. The vulnerability is triggered through user-supplied contid data, enabling partial confidentiality and...