high7.5Public exploit code
CVE-2006-6642
SQL injection vulnerability in haber.asp in Contra Haber Sistemi 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Contra Haber Sistemi 1.0 - 'Haber.asp' SQL Injection2006-12-16 · webapps · asp · Verified
Impact
SQL injection vulnerability in haber.asp in Contra Haber Sistemi 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Contra Haber Sistemi | Contra Haber Sistemi | Version 1.0 |
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/2050
- http://www.securityfocus.com/archive/1/454594/100/0/threaded
- http://www.securityfocus.com/bid/21626
- http://www.vupen.com/english/advisories/2006/5036
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30917
- http://securityreason.com/securityalert/2050
- http://www.securityfocus.com/archive/1/454594/100/0/threaded
- http://www.securityfocus.com/bid/21626
- http://www.vupen.com/english/advisories/2006/5036
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30917