Chimera Web Portal System linkcategory.php id Parameter SQL Injection - Ver2 (CVE-2006-0137)

An SQL injection vulnerability has been reported in Phanatic Softwares Chimera Web Portal System. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2006-0137

CVE-2006-0137 describes an SQL injection in Chimera Web Portal System 0.2, specifically in linkcategory.php where the id parameter can be used by a remote attacker to execute arbitrary SQL commands. The linked CPAI advisories confirm the vulnerability as SQL injection in the Chimera Web Portal Sy...

CVE-2006-0136

Phanatic Software’s Chimera Web Portal System 0.2 is affected by multiple cross-site scripting (XSS) vulnerabilities in the guestbook module (modules.php). The flaw allows remote attackers to inject arbitrary script or HTML via the comment_poster, comment_poster_email, comment_poster_homepage, or...