high7.5
CVE-2006-3666
SQL injection vulnerability in AjaxPortal 3.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the 'Search' field…
Impact
SQL injection vulnerability in AjaxPortal 3.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the 'Search' field, a different vulnerability than CVE-2006-3515.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Myiosoft.Com | Ajaxportal | Version 3.0 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/20985
- http://www.osvdb.org/27068
- http://www.securityfocus.com/archive/1/439614
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27644
- http://secunia.com/advisories/20985
- http://www.osvdb.org/27068
- http://www.securityfocus.com/archive/1/439614
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27644