high7.5
CVE-2006-6132
Multiple SQL injection vulnerabilities in Link Exchange Lite allow remote attackers to execute arbitrary SQL commands via (1) the search engine field to search…
Impact
Multiple SQL injection vulnerabilities in Link Exchange Lite allow remote attackers to execute arbitrary SQL commands via (1) the search engine field to search.asp and (2) psearch parameter to linkslist.asp.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Softacid | Link Exchange Lite | Version 1.0 |
References
- NVD record
- CVE.org record
- http://s-a-p.ca/index.php?page=OurAdvisories&id=53
- http://secunia.com/advisories/23068
- http://securityreason.com/securityalert/1920
- http://www.securityfocus.com/archive/1/452256/100/0/threaded
- http://www.securityfocus.com/bid/21239
- http://www.vupen.com/english/advisories/2006/4656
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30460
- http://s-a-p.ca/index.php?page=OurAdvisories&id=53
- http://secunia.com/advisories/23068
- http://securityreason.com/securityalert/1920
- http://www.securityfocus.com/archive/1/452256/100/0/threaded
- http://www.securityfocus.com/bid/21239
- http://www.vupen.com/english/advisories/2006/4656
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30460