Sql injection

SQL injection vulnerability in searchresult.asp in EDirectoryPro 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the keyword parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-2296

The CVE-2006-2296 entry concerns an SQL injection in EDirectoryPro 2.0 and earlier, specifically affecting the search_result.asp component. The underlying issue is a vulnerability in handling the keyword parameter that allows remote attackers to execute arbitrary SQL commands. Affects: EDirectory...