Lucene search
+L

2 matches found

Cvelist
Cvelist
added 2006/01/09 11:0 a.m.18 views

CVE-2006-0115

Multiple SQL injection vulnerabilities in OnePlug Solutions OnePlug CMS allow remote attackers to execute arbitrary SQL commands via the 1 PressReleaseID parameter in press/details.asp, 2 ServiceID parameter in services/details.asp, and 3 ProductID parameter in products/details.asp...

8.5AI score0.01303EPSS
SaveExploits4References7
CVE
CVE
added 2006/01/09 11:0 a.m.41 views

CVE-2006-0115

The provided connected documents confirm CVE-2006-0115 affects OnePlug Solutions OnePlug CMS with three SQL injection weaknesses in details.asp endpoints (Press_Release_ID, Service_ID, Product_ID). The underlying issue is improper input handling allowing remote SQL command execution (c.f. NVD ent...

7.5CVSS8.5AI score0.01303EPSS
SaveExploits4References7Affected Software1
Rows per page
Query Builder