NetSight
IP …
high7.5

CVE-2006-3430

SQL injection vulnerability in checkprofile.asp in (1) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1 and (2) Novell ZENworks 6.2 SR1…

Impact

SQL injection vulnerability in checkprofile.asp in (1) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1 and (2) Novell ZENworks 6.2 SR1 and earlier, allows remote attackers to execute arbitrary SQL commands via the agentid parameter.

Affected products

VendorProductAffected versions
LumensionPatchlink Update Server
Versions 6.1, 6.2.0.181, 6.2.0.189
NovellZenworks
through 6.2

Weakness classification

CWE-89

References