CVE-2006-6160 - SQL injection vulnerability in details.asp in Doug Luxem Liberum Help Desk 0.97.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter

Back Back to CVE browser

HIGH

SQL injection vulnerability in details.asp in Doug Luxem Liberum Help Desk 0.97.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter

Published Nov 28, 2006

7.5

HIGH

CVSS 2.0

EPSS 1.08%

Description

SQL injection vulnerability in details.asp in Doug Luxem Liberum Help Desk 0.97.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

http://www.securityfocus.com/bid/21292
vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2006/4704
vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/30485
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/2846
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://www.securityfocus.com/bid/21292		vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2006/4704		vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/30485		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/2846		exploitx_refsource_EXPLOIT-DB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Nov 28, 2006

Updated Aug 7, 2024

Reserved Nov 28, 2006

Link CVE-2006-6160

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-6160

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-6160