7.5
CVSSv2

CVE-2006-6813

Published: 29/12/2006 Updated: 19/10/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in detail.asp in Mxmania File Upload Manager (FUM) 1.0.6 and previous versions allows remote malicious users to execute arbitrary SQL commands via the ID parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

mxmania mxmania file upload manager

Exploits

#!/usr/bin/perl #[Script Name: File Upload Manager <= 106 (detailasp) Remote SQL Injection Exploit #[Coded by : ajann #[Author : ajann #[Contact : :( #[SPage : wwwmxmanianet #[$$ : 2999 #[ : ajann,Turkey use IO::Socket; if(@ARGV < 1){ print " [==================================================== ...