medium5.1Public exploit code
CVE-2006-3822
SQL injection vulnerability in index.php in GeodesicSolutions GeoAuctions Enterprise 1.0.6 allows remote attackers to execute arbitrary SQL commands via the d …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- GeoAuctions 1.0.6 Enterprise - 'index.php?d' SQL Injection2006-07-20 · webapps · php · Verified
Impact
SQL injection vulnerability in index.php in GeodesicSolutions GeoAuctions Enterprise 1.0.6 allows remote attackers to execute arbitrary SQL commands via the d parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Geodesicsolutions | Geoauctions Enterprise | Version 1.0.6 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/21325
- http://www.packetstormsecurity.org/0607-exploits/geoauctionsSQL.txt
- http://www.securityfocus.com/bid/19093
- http://www.vupen.com/english/advisories/2006/3133
- http://secunia.com/advisories/21325
- http://www.packetstormsecurity.org/0607-exploits/geoauctionsSQL.txt
- http://www.securityfocus.com/bid/19093
- http://www.vupen.com/english/advisories/2006/3133