CVE-2006-3236 Multiple SQL injection vulnerabilities in thinkWMS 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in (a) index.php or (b) printarticle.php, and the (...
HighCVSS 7.5
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in thinkWMS 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in (a) index.php or (b) printarticle.php, and the (2) catid parameter in index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| thinkfactory thinkwms | <= 1.0 | No fix listed |
References
- pridels0.blogspot.com
- 20747 third-party-advisory vendor-advisory
- 1016355 vdb-entry
- 26742 vdb-entry
- 26743 vdb-entry
- 18567 vdb-entry
- ADV-2006-2470 vdb-entry
- thinkwms-printarticle-sql-injection(27270) vdb-entry