high7.5
CVE-2006-2720
SQL injection vulnerability in news.php in VARIOMAT allows remote attackers to execute arbitrary SQL commands via the subcat parameter.
Impact
SQL injection vulnerability in news.php in VARIOMAT allows remote attackers to execute arbitrary SQL commands via the subcat parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Variomat | Variomat | All versions |
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/999
- http://www.securityfocus.com/archive/1/435290/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26872
- http://securityreason.com/securityalert/999
- http://www.securityfocus.com/archive/1/435290/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26872