Published: 01/12/2006 Updated: 14/02/2024

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 765

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Multiple SQL injection vulnerabilities in Enthrallweb eClassifieds allow remote malicious users to execute arbitrary SQL commands via the (1) AD_ID, (2) cat_id, (3) sub_id, and (4) ad_id parameters to (a) ad.asp, the (5) cid parameter to (b) dircat.asp, and the (6) sid parameter to (c) dirSub.asp.

Vulnerable Product	Search on Vulmon	Subscribe to Product
enthrallweb eclassifieds

source: wwwsecurityfocuscom/bid/21192/info eClassifieds is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilitie ...

source: wwwsecurityfocuscom/bid/21192/info eClassifieds is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities ...

source: wwwsecurityfocuscom/bid/21192/info eClassifieds is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in ...

NVD-CWE-Other http://s-a-p.ca/index.php?page=OurAdvisories&id=46 http://www.securityfocus.com/bid/21192 http://secunia.com/advisories/23050 http://securityreason.com/securityalert/1943 http://www.vupen.com/english/advisories/2006/4642 https://exchange.xforce.ibmcloud.com/vulnerabilities/30423 http://www.securityfocus.com/archive/1/452102/100/100/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/29120/

CVE-2006-6208

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect