high7.5Public exploit code
CVE-2006-6050
Multiple SQL injection vulnerabilities in ClickTech Texas Rank'em allow remote attackers to execute arbitrary SQL commands via the (1) selPlayer parameter to p…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Texas Rankem - 'tournament_id' SQL Injection2006-11-18 · webapps · asp · Verified
- Texas Rankem - 'selPlayer' SQL Injection2006-11-18 · webapps · asp · Verified
Impact
Multiple SQL injection vulnerabilities in ClickTech Texas Rank'em allow remote attackers to execute arbitrary SQL commands via the (1) selPlayer parameter to player.asp or the (2) tournament_id parameter to tournaments.asp.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Clicktech | Texas Rankem | All versions |
References
- NVD record
- CVE.org record
- http://www.aria-security.com/forum/showthread.php?t=34
- http://www.securityfocus.com/archive/1/452017/100/0/threaded
- http://www.securityfocus.com/bid/21168
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30384
- http://www.aria-security.com/forum/showthread.php?t=34
- http://www.securityfocus.com/archive/1/452017/100/0/threaded
- http://www.securityfocus.com/bid/21168
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30384