CVE-2006-5446 SQL injection vulnerability in lobby/config.php in Casinosoft Casino Script (aka Masvet) 3.2 allows remote attackers to execute arbitrary SQL commands via the cfam parameter.
MediumCVSS 5.1
EPSS 1.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in lobby/config.php in Casinosoft Casino Script (aka Masvet) 3.2 allows remote attackers to execute arbitrary SQL commands via the cfam parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| casinosoft casino script | = 3.2 | No fix listed |
References
- 22398 exploit third-party-advisory vendor-advisory
- 20646 exploit vdb-entry
- www.securitylab.ru exploit
- ADV-2006-4131 vdb-entry
- casinosoft-config-sql-injection(29684) vdb-entry