high7.5
CVE-2006-5798
SQL injection vulnerability in default.asp in Xenis.creator CMS allows remote attackers to execute arbitrary SQL commands via the contid parameter.
Impact
SQL injection vulnerability in default.asp in Xenis.creator CMS allows remote attackers to execute arbitrary SQL commands via the contid parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xenis | Xenis.Creator Cms | All versions |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=116267021732120&w=2
- http://securitytracker.com/id?1017162
- http://www.securityfocus.com/bid/20908
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30017
- http://marc.info/?l=bugtraq&m=116267021732120&w=2
- http://securitytracker.com/id?1017162
- http://www.securityfocus.com/bid/20908
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30017