CVE-2006-4598 Multiple SQL injection vulnerabilities in links.php in ssLinks 1.22 allow remote attackers to execute arbitrary SQL commands via the (1) go parameter and (2) id parameter in a rate action.
HighCVSS 7.5
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in links.php in ssLinks 1.22 allow remote attackers to execute arbitrary SQL commands via the (1) go parameter and (2) id parameter in a rate action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sslinks | = 1.22 | No fix listed |
References
- 21736 third-party-advisory vendor-advisory
- 1505 third-party-advisory
- 20060902 ssLinks <=v1.22 Multiple SQL Injection Vulnerabilities mailing-list
- 20060928 Re: ssLinks <=v1.22 Multiple SQL Injection Vulnerabilities mailing-list
- 19815 exploit vdb-entry
- ADV-2006-3443 vdb-entry