CVE-2006-6116 - SQL injection vulnerability in default2.asp in fipsForum 2.6 and earlier allows remote attackers to execute arbitrary SQL commands via the kat parameter

Back Back to CVE browser

HIGH

SQL injection vulnerability in default2.asp in fipsForum 2.6 and earlier allows remote attackers to execute arbitrary SQL commands via the kat parameter

Published Nov 26, 2006

7.5

HIGH

CVSS 2.0

EPSS 1.24%

Description

SQL injection vulnerability in default2.asp in fipsForum 2.6 and earlier allows remote attackers to execute arbitrary SQL commands via the kat parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (5)

http://secunia.com/advisories/23057
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/21253
vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2006/4682
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-6099
Advisory
https://www.exploit-db.com/exploits/2830
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://secunia.com/advisories/23057		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/21253		vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2006/4682		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-6099		Advisory
https://www.exploit-db.com/exploits/2830		exploitx_refsource_EXPLOIT-DB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Nov 26, 2006

Updated Aug 7, 2024

Reserved Nov 26, 2006

Link CVE-2006-6116

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-6116

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Nov 26, 2006

Updated Aug 7, 2024

Link EUVD-2006-6099

GitHub

No data