CVE-2006-6776 Multiple SQL injection vulnerabilities in Future Internet allow remote attackers to execute arbitrary SQL commands via the (1) newsId or (2) categoryid parameter in a Portal.Showpage action in index.c...
HighCVSS 7.5
EPSS 1.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple SQL injection vulnerabilities in Future Internet allow remote attackers to execute arbitrary SQL commands via the (1) newsId or (2) categoryid parameter in a Portal.Showpage action in index.cfm, or (3) the langId parameter in index.cfm.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| future internet | All versions | No fix listed |
References
- 2061 third-party-advisory
- 20061223 Multiple Bugs in Future Internet ( XSS & SQL Injection ) mailing-list
- 21727 exploit vdb-entry