CVE-2006-5887

The CVE-2006-5887 entry describes a SQL injection vulnerability in Dynamic Dataworx NuSchool 1.0, specifically in CampusNewsDetails.asp where the NewsID parameter can be exploited to execute arbitrary SQL commands remotely. This is the stated root cause and impact in the provided documents. The s...

CVE-2006-5887

SQL injection vulnerability in CampusNewsDetails.asp in Dynamic Dataworx NuSchool 1.0 allows remote attackers to execute arbitrary SQL commands via the NewsID parameter...

NuSchool 1.0 - 'CampusNewsDetails.asp' SQL Injection

!/usr/bin/perl Script Name: NuSchool 1.0 CampusNewsDetails.asp Remote SQL Injection Exploit Coded by : ajann Author : ajann Contact : : use IO::Socket; if@ARGV newProto = "tcp", PeerAddr = "$server", PeerPort = "$port" || die "\n+ Connection failed...\n"; print $socket "GET $target\n"; print...