CVE-2006-4501 SQL injection vulnerability in index.php in ezPortal/ztml CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) about, (2) album, (3) id, (4) use, (5) desc, (6) doc, (7) mname,...
HighCVSS 7.5
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in index.php in ezPortal/ztml CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) about, (2) album, (3) id, (4) use, (5) desc, (6) doc, (7) mname, (8) max, and possibly other parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ztml ezportal ztml cms | = 1.0 | No fix listed |
References
- 1481 third-party-advisory
- 20060830 Ezportal/Ztml v1.0 Multiple vulnerabilities mailing-list
- 19759 exploit vdb-entry
- ezportalztml-index-sql-injection(28667) vdb-entry