CVE-2006-5797

Description

Multiple SQL injection vulnerabilities in default.asp in Xenis.creator CMS allow remote attackers to execute arbitrary SQL commands via the (1) nav, (2) s, or (3) print parameters.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/30017

http://www.vupen.com/english/advisories/2006/4470

http://www.securityfocus.com/bid/20908

http://www.majorsecurity.de/index_2.php?major_rls=major_rls31

http://securitytracker.com/id?1017162

http://secunia.com/advisories/22716

http://marc.info/?l=bugtraq&m=116267021732120&w=2

http://marc.info/?l=bugtraq&m=116266150514762&w=2

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS