CVE-2006-3027 - Multiple SQL injection vulnerabilities in Enthrallwebe ePhotos 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) CAT_ID parameter in (a) subphotos.asp and (b) subLevel2.asp, the (2) AL_ID parameter in (c) photo.asp, and the (3) SUB_ID parameter in (d) subLevel2.asp

Back Back to CVE browser

HIGH

Multiple SQL injection vulnerabilities in Enthrallwebe ePhotos 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) CAT_ID parameter in (a) subphotos.asp and (b) subLevel2.asp, the (2) AL_ID parameter in (c) photo.asp, and the (3) SUB_ID parameter in (d) subLevel2.asp

Published Jun 15, 2006

7.5

HIGH

CVSS 2.0

EPSS 2.69%

Description

Multiple SQL injection vulnerabilities in Enthrallwebe ePhotos 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) CAT_ID parameter in (a) subphotos.asp and (b) subLevel2.asp, the (2) AL_ID parameter in (c) photo.asp, and the (3) SUB_ID parameter in (d) subLevel2.asp.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (11)

http://pridels0.blogspot.com/2006/06/ephotos-vuln.html
x_refsource_MISC
http://secunia.com/advisories/20609
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/23525
third-party-advisoryx_refsource_SECUNIAExploitVendor Advisory
http://www.osvdb.org/26365
vdb-entryx_refsource_OSVDB
http://www.osvdb.org/26366
vdb-entryx_refsource_OSVDB
http://www.osvdb.org/26367
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/21742
vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2006/2316
vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2006/5160
vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/27035
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/2986
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://pridels0.blogspot.com/2006/06/ephotos-vuln.html		x_refsource_MISC
http://secunia.com/advisories/20609		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/23525		third-party-advisoryx_refsource_SECUNIAExploitVendor Advisory
http://www.osvdb.org/26365		vdb-entryx_refsource_OSVDB
http://www.osvdb.org/26366		vdb-entryx_refsource_OSVDB
http://www.osvdb.org/26367		vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/21742		vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2006/2316		vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2006/5160		vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/27035		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/2986		exploitx_refsource_EXPLOIT-DB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jun 15, 2006

Updated Aug 7, 2024

Reserved Jun 15, 2006

Link CVE-2006-3027

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-3027

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-3027