CVE-2006-5628 SQL injection vulnerability in login.asp in UNISOR Content Management System (CMS) allows remote attackers to execute arbitrary SQL commands via the (1) user or (2) pass fields.
HighCVSS 7.5
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in login.asp in UNISOR Content Management System (CMS) allows remote attackers to execute arbitrary SQL commands via the (1) user or (2) pass fields.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| unisor cms | All versions | No fix listed |
References
- 1800 third-party-advisory
- 20061027 UNISOR CMS sql injection mailing-list
- 20770 vdb-entry
- unisorcms-login-sql-injection(29855) vdb-entry