CoreCVE
Back

HIGH

Multiple SQL injection vulnerabilities in EImagePro allow remote attackers to execute arbitrary SQL commands via the (1) CatID parameter to subList.asp, (2) SubjectID parameter to imageList.asp, or (3) Pic parameter to view.asp

Published May 11, 2006

Description

Multiple SQL injection vulnerabilities in EImagePro allow remote attackers to execute arbitrary SQL commands via the (1) CatID parameter to subList.asp, (2) SubjectID parameter to imageList.asp, or (3) Pic parameter to view.asp.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (9)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published May 11, 2006
Updated Aug 7, 2024
Reserved May 11, 2006
Link CVE-2006-2300
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 16, 2026
Link CVE-2006-2300
Red Hat
Severity n/a
Public date n/a
Links CVE-2006-2300
ENISA EUVD
Assigner mitre
Published May 11, 2006
Updated Aug 7, 2024
Exploited since n/a
Link EUVD-2006-2301
EUVD-2006-2301