CVE-2006-6147

Published: 28/11/2006 Updated: 17/10/2018

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 760

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Multiple SQL injection vulnerabilities in JiRos Links Manager allow remote malicious users to execute arbitrary SQL commands via the (1) LinkID parameter to openlink.asp or the (2) CategoryID parameter to viewlinks.asp.

Vulnerable Product	Search on Vulmon	Subscribe to Product
jiros links manager 1.0

source: wwwsecurityfocuscom/bid/21226/info JiRos Links Manager is prone to multiple input-validation vulnerabilities, including SQL- and HTML-injection issues, because it fails to sufficiently sanitize user-supplied data Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the appl ...

source: wwwsecurityfocuscom/bid/21226/info JiRos Links Manager is prone to multiple input-validation vulnerabilities, including SQL- and HTML-injection issues, because it fails to sufficiently sanitize user-supplied data Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the ap ...

NVD-CWE-Other http://www.frsirt.com/english/reference-2006-4664-1.php http://www.securityfocus.com/bid/21226 http://securitytracker.com/id?1017280 http://secunia.com/advisories/23063 http://www.vupen.com/english/advisories/2006/4664 https://exchange.xforce.ibmcloud.com/vulnerabilities/30462 http://www.securityfocus.com/archive/1/452265/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/29152/

CVE-2006-6147

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect