CVE-2006-5145 Multiple SQL injection vulnerabilities in OlateDownload 3.4.0 allow remote attackers to execute arbitrary SQL commands via the (1) page parameter in details.php or the (2) query parameter in search.ph...
HighCVSS 7.5
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in OlateDownload 3.4.0 allow remote attackers to execute arbitrary SQL commands via the (1) page parameter in details.php or the (2) query parameter in search.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| olatedownload | = 3.4.0 | No fix listed |
References
- 22241 third-party-advisory
- 1680 third-party-advisory
- 20060930 OlateDownload 3.4.0 Multiple Vulnerabilities mailing-list
- 20278 exploit vdb-entry
- olate-download-detailes-search-sql-injection(29294) vdb-entry