CVE-2006-2339

Description

SQL injection vulnerability in index.php in evoTopsites 2.x and evoTopsites Pro 2.x allows remote attackers to execute arbitrary SQL commands via the (1) cat_id and (2) id parameters.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/26328

http://www.vupen.com/english/advisories/2006/1689

http://www.osvdb.org/25440

http://securitytracker.com/id?1016062

http://secunia.com/advisories/19989

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS