CVE-2006-6147 - Multiple SQL injection vulnerabilities in JiRos Links Manager allow remote attackers to execute arbitrary SQL commands via the (1) LinkID parameter to openlink.asp or the (2) CategoryID parameter to viewlinks.asp

Back Back to CVE browser

HIGH

Multiple SQL injection vulnerabilities in JiRos Links Manager allow remote attackers to execute arbitrary SQL commands via the (1) LinkID parameter to openlink.asp or the (2) CategoryID parameter to viewlinks.asp

Published Nov 28, 2006

7.5

HIGH

CVSS 2.0

EPSS 1.27%

Description

Multiple SQL injection vulnerabilities in JiRos Links Manager allow remote attackers to execute arbitrary SQL commands via the (1) LinkID parameter to openlink.asp or the (2) CategoryID parameter to viewlinks.asp.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (8)

http://secunia.com/advisories/23063
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securitytracker.com/id?1017280
vdb-entryx_refsource_SECTRACKVendor Advisory
http://www.frsirt.com/english/reference-2006-4664-1.php
x_refsource_MISCVendor Advisory
http://www.securityfocus.com/archive/1/452265/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/21226
vdb-entryx_refsource_BIDExploitVendor Advisory
http://www.vupen.com/english/advisories/2006/4664
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-6130
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/30462
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/23063		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securitytracker.com/id?1017280		vdb-entryx_refsource_SECTRACKVendor Advisory
http://www.frsirt.com/english/reference-2006-4664-1.php		x_refsource_MISCVendor Advisory
http://www.securityfocus.com/archive/1/452265/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/21226		vdb-entryx_refsource_BIDExploitVendor Advisory
http://www.vupen.com/english/advisories/2006/4664		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-6130		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/30462		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Nov 28, 2006

Updated Aug 7, 2024

Reserved Nov 28, 2006

Link CVE-2006-6147

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-6147

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Nov 28, 2006

Updated Aug 7, 2024

Link EUVD-2006-6130

GitHub

No data