high7.5Public exploit code
CVE-2006-6147
Multiple SQL injection vulnerabilities in JiRos Links Manager allow remote attackers to execute arbitrary SQL commands via the (1) LinkID parameter to openlink…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- JiRos Link Manager 1.0 - 'viewlinks.asp?categoryId' SQL Injection2006-11-21 · webapps · asp · Verified
- JiRos Link Manager 1.0 - 'openlink.asp?LinkID' SQL Injection2006-11-21 · webapps · asp · Verified
Impact
Multiple SQL injection vulnerabilities in JiRos Links Manager allow remote attackers to execute arbitrary SQL commands via the (1) LinkID parameter to openlink.asp or the (2) CategoryID parameter to viewlinks.asp.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jiros | Links Manager | Version 1.0 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/23063
- http://securitytracker.com/id?1017280
- http://www.frsirt.com/english/reference-2006-4664-1.php
- http://www.securityfocus.com/archive/1/452265/100/0/threaded
- http://www.securityfocus.com/bid/21226
- http://www.vupen.com/english/advisories/2006/4664
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30462
- http://secunia.com/advisories/23063
- http://securitytracker.com/id?1017280
- http://www.frsirt.com/english/reference-2006-4664-1.php
- http://www.securityfocus.com/archive/1/452265/100/0/threaded
- http://www.securityfocus.com/bid/21226
- http://www.vupen.com/english/advisories/2006/4664
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30462