high7.5Public exploit code
CVE-2006-6342
Multiple SQL injection vulnerabilities in KLF-DESIGN (aka Kim L.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Klf-Realty 2.0 - 'detail.asp?property_id' SQL Injection2006-11-20 · webapps · asp · Verified
- Klf-Realty 2.0 - 'search_listing.asp' Multiple SQL Injections2006-11-20 · webapps · asp · Verified
Impact
Multiple SQL injection vulnerabilities in KLF-DESIGN (aka Kim L. Fraser) KLF-REALTY allow remote attackers to execute arbitrary SQL commands via the (1) category and (2) agent parameters in (a) search_listing.asp, and the (3) property_id parameter in (b) detail.asp.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Klf-Design | Klf-Realty | All versions |
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/1976
- http://www.securityfocus.com/archive/1/452115/100/200/threaded
- http://www.securityfocus.com/bid/21199
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30435
- http://securityreason.com/securityalert/1976
- http://www.securityfocus.com/archive/1/452115/100/200/threaded
- http://www.securityfocus.com/bid/21199
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30435