CVE-2006-2128 Multiple SQL injection vulnerabilities in Pro Publish 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) email and (2) password parameter to (a) admin/login.php, (3) find_str par...
HighCVSS 7.5
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in Pro Publish 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) email and (2) password parameter to (a) admin/login.php, (3) find_str parameter to (b) search.php, or (4) artid parameter to (c) art.php, or (5) catid parameter to (d) cat.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| deltascripts pro publish | = 2.0 | No fix listed |
References
- evuln.com
- 19882 third-party-advisory vendor-advisory
- soot.shabgard.org
- 25124 vdb-entry
- 25125 vdb-entry
- 25126 vdb-entry
- 25127 vdb-entry
- 20060602 Pro Publish SQL Injection and XSS Vulnerabilities mailing-list
- 17762 vdb-entry
- ADV-2006-1578 vdb-entry vendor-advisory
- propublish-multiple-sql-injection(26148) vdb-entry