CVE-2006-6269 - Multiple SQL injection vulnerabilities in Infinitytechs Restaurants CM allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in rating.asp, (2) the mealid parameter in meal_rest.asp, and (3) the resid parameter in res_details.asp

Back Back to CVE browser

HIGH

Multiple SQL injection vulnerabilities in Infinitytechs Restaurants CM allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in rating.asp, (2) the mealid parameter in meal_rest.asp, and (3) the resid parameter in res_details.asp

Published Dec 4, 2006

7.5

HIGH

CVSS 2.0

EPSS 1.09%

Description

Multiple SQL injection vulnerabilities in Infinitytechs Restaurants CM allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in rating.asp, (2) the mealid parameter in meal_rest.asp, and (3) the resid parameter in res_details.asp.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

http://securityreason.com/securityalert/1981
third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/451970/100/200/threaded
mailing-listx_refsource_BUGTRAQ
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-6252
Advisory

Link	Providers	Tags
http://securityreason.com/securityalert/1981		third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/451970/100/200/threaded		mailing-listx_refsource_BUGTRAQ
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-6252		Advisory