CVE-2006-0581

Description

SQL injection vulnerability in Hosting Controller 6.1 Hotfix 2.8 allows remote authenticated users to execute arbitrary SQL commands via the (1) GatewayID parameter in an add action in AddGatewaySettings.asp and (2) IP parameter in IPManager.asp.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/24537

http://www.vupen.com/english/advisories/2006/0460

http://www.osvdb.org/22983

http://www.osvdb.org/22982

http://secunia.com/advisories/18731

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS