CVE-2006-2993

Description

Multiple SQL injection vulnerabilities in My Photo Scrapbook 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the key parameter in (1) Displayview.asp and (2) Details_Photo_bv.asp.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/27087

http://www.vupen.com/english/advisories/2006/2244

http://www.securityfocus.com/bid/18418

http://www.osvdb.org/26282

http://www.osvdb.org/26281

http://secunia.com/advisories/20554

http://pridels0.blogspot.com/2006/06/my-photo-scrapbook-vuln.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS