CVE-2006-3292

Description

SQL injection vulnerability in the Search gadget in Jaws 0.6.2 allows remote attackers to execute arbitrary SQL commands via queries with the "LIKE" keyword in the searchdata parameter (search field).

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/27334

http://www.vupen.com/english/advisories/2006/2546

http://www.securityfocus.com/archive/1/438434/100/0/threaded

http://www.jaws-project.com/index.php?blog/show/29

http://securityreason.com/securityalert/1165

http://secunia.com/advisories/20842

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS