NetSight
high7.5

CVE-2006-3140

SQL injection vulnerability in index.php in openCI 1.0 BETA 0.20.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

Impact

SQL injection vulnerability in index.php in openCI 1.0 BETA 0.20.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected products

VendorProductAffected versions
OpenciOpenci
through 1.0_beta_0.20.1

References