CVE-2006-5797 Multiple SQL injection vulnerabilities in default.asp in Xenis.creator CMS allow remote attackers to execute arbitrary SQL commands via the (1) nav, (2) s, or (3) print parameters.
HighCVSS 7.5
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in default.asp in Xenis.creator CMS allow remote attackers to execute arbitrary SQL commands via the (1) nav, (2) s, or (3) print parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xenis.creator cms | All versions | No fix listed |
References
- 20061104 Xenis.creator CMS - Multiple Cross mailing-list
- 20061104 Re: MajorSecurity Advisory #31]Xenis.creator CMS - Multiple Cross mailing-list
- 22716 third-party-advisory
- 1017162 vdb-entry vendor-advisory
- www.majorsecurity.de
- 20908 vdb-entry
- ADV-2006-4470 vdb-entry
- xeniscreatorcms-default-sql-injection(30017) vdb-entry