CVE-2006-1947

Multiple SQL injection vulnerabilities in plexum.php in NicPlex Plexum X5 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 pagesize, 2 maxrec, and 3 startpos parameters...

CVE-2006-1947

CVE-2006-1947 affects NicPlex Plexum X5 and earlier. Vulnerable component: plexum.php; affected function/entry: the SQL queries that use the parameters (1) pagesize, (2) maxrec, and (3) startpos). Condition: remote attackers can trigger SQL injection, enabling arbitrary SQL execution. CVSS-derive...