CVE-2006-5184

critical

Description

SQL injection vulnerability in PKR Internet Taskjitsu before 2.0.6 allows remote attackers to execute arbitrary SQL commands via the key parameter, when the limit query parameter is set to customerid.

References

https://www.pkrinternet.com/taskjitsu/task/3517

https://www.pkrinternet.com/download/RELEASE-NOTES.txt

http://www.vupen.com/english/advisories/2006/3903

http://www.securityfocus.com/bid/20332

http://securitytracker.com/id?1016978

http://secunia.com/advisories/22257

Details

Source: Mitre, NVD

Published: 2006-10-10

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.00754

Detections

Analytics