CVE-2006-6367

Description

Multiple SQL injection vulnerabilities in detail.asp in DUware DUdownload 1.1, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) iFile or (2) action parameter. NOTE: the iType parameter is already covered by CVE-2005-3976.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/30669

https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-6350

http://www.vupen.com/english/advisories/2006/4845

http://www.securityfocus.com/bid/21405

http://www.aria-security.com/forum/showthread.php?t=60

http://secunia.com/advisories/23224

http://marc.info/?l=bugtraq&m=116508632603388&w=2

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS