CVE-2006-4463

CVE-2006-4463 : SQL injection vulnerability in the administrator control panel of Jetstat.com JS ASP Faq Manager 1.10 and earlier, allowing remote attackers to execute arbitrary SQL commands through the pwd parameter (.password field). Connected records also show a related, different-vector CVE-2...

CVE-2006-4590

CVE-2006-4463 and CVE-2006-4590 describe SQL injection flaws in Jetstat.com JS ASP Faq Manager 1.10 and earlier. CVE-2006-4463 affects the administrator control panel via the pwd parameter; CVE-2006-4590 affects admin/default.asp via the uid parameter. Both allow remote attackers to potentially e...