CVE-2006-6117 - SQL injection vulnerability in index1.asp in fipsGallery 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the which parameter

Back Back to CVE browser

HIGH

SQL injection vulnerability in index1.asp in fipsGallery 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the which parameter

Published Nov 26, 2006

7.5

HIGH

CVSS 2.0

EPSS 1.24%

Description

SQL injection vulnerability in index1.asp in fipsGallery 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the which parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (5)

http://secunia.com/advisories/23056
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/21254
vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2006/4683
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-6100
Advisory
https://www.exploit-db.com/exploits/2829
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://secunia.com/advisories/23056		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/21254		vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2006/4683		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-6100		Advisory
https://www.exploit-db.com/exploits/2829		exploitx_refsource_EXPLOIT-DB