high7.5
CVE-2006-3150
SQL injection vulnerability in index.php in CavoxCms 1.0.16 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter.
Impact
SQL injection vulnerability in index.php in CavoxCms 1.0.16 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cavoxcms | Cavoxcms | Version 1.0.16 |
References
- NVD record
- CVE.org record
- http://pridels0.blogspot.com/2006/06/cavoxcms-sql-injection-vuln.html
- http://secunia.com/advisories/20600
- http://www.osvdb.org/26658
- http://www.securityfocus.com/bid/18533
- http://www.vupen.com/english/advisories/2006/2433
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27249
- http://pridels0.blogspot.com/2006/06/cavoxcms-sql-injection-vuln.html
- http://secunia.com/advisories/20600
- http://www.osvdb.org/26658
- http://www.securityfocus.com/bid/18533
- http://www.vupen.com/english/advisories/2006/2433
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27249