high7.5
CVE-2006-5128
SQL injection vulnerability in index.php in Bartels Schoene ConPresso before 4.0.5a allows remote attackers to execute arbitrary SQL commands via the nr parame…
Impact
SQL injection vulnerability in index.php in Bartels Schoene ConPresso before 4.0.5a allows remote attackers to execute arbitrary SQL commands via the nr parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Conpresso | Conpresso Cms | through 4.0.4a |
References
- NVD record
- CVE.org record
- http://download.compresso.de/compresso-4.0.5a.zip
- http://secunia.com/advisories/22145
- http://securityreason.com/securityalert/1671
- http://www.majorsecurity.de/index_2.php?major_rls=major_rls28
- http://www.securityfocus.com/archive/1/447358/100/0/threaded
- http://www.securityfocus.com/bid/20273
- http://www.vupen.com/english/advisories/2006/3868
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29275
- http://download.compresso.de/compresso-4.0.5a.zip
- http://secunia.com/advisories/22145
- http://securityreason.com/securityalert/1671
- http://www.majorsecurity.de/index_2.php?major_rls=major_rls28
- http://www.securityfocus.com/archive/1/447358/100/0/threaded
- http://www.securityfocus.com/bid/20273
- http://www.vupen.com/english/advisories/2006/3868
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29275