CVE-2006-6208 - Multiple SQL injection vulnerabilities in Enthrallweb eClassifieds allow remote attackers to execute arbitrary SQL commands via the (1) AD_ID, (2) cat_id, (3) sub_id, and (4) ad_id parameters to (a) ad.asp, the (5) cid parameter to (b) dircat.asp, and the (6) sid parameter to (c) dirSub.asp

Back Back to CVE browser

HIGH

Multiple SQL injection vulnerabilities in Enthrallweb eClassifieds allow remote attackers to execute arbitrary SQL commands via the (1) AD_ID, (2) cat_id, (3) sub_id, and (4) ad_id parameters to (a) ad.asp, the (5) cid parameter to (b) dircat.asp, and the (6) sid parameter to (c) dirSub.asp

Published Dec 1, 2006

7.5

HIGH

CVSS 2.0

EPSS 1.27%

Description

Multiple SQL injection vulnerabilities in Enthrallweb eClassifieds allow remote attackers to execute arbitrary SQL commands via the (1) AD_ID, (2) cat_id, (3) sub_id, and (4) ad_id parameters to (a) ad.asp, the (5) cid parameter to (b) dircat.asp, and the (6) sid parameter to (c) dirSub.asp.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (7)

http://s-a-p.ca/index.php?page=OurAdvisories&id=46
x_refsource_MISCExploitURL Repurposed
http://secunia.com/advisories/23050
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securityreason.com/securityalert/1943
third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/452102/100/100/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/21192
vdb-entryx_refsource_BIDExploitVendor Advisory
http://www.vupen.com/english/advisories/2006/4642
vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/30423
vdb-entryx_refsource_XF

Link	Providers	Tags
http://s-a-p.ca/index.php?page=OurAdvisories&id=46		x_refsource_MISCExploitURL Repurposed
http://secunia.com/advisories/23050		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securityreason.com/securityalert/1943		third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/452102/100/100/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/21192		vdb-entryx_refsource_BIDExploitVendor Advisory
http://www.vupen.com/english/advisories/2006/4642		vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/30423		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Dec 1, 2006

Updated Aug 7, 2024

Reserved Nov 30, 2006

Link CVE-2006-6208

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-6208

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-6208