Unscored severity · published Jun 19, 2006
CVE-2006-3096
Multiple SQL injection vulnerabilities in iPostMX 2005 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) forum parameter in messagepost.cfm and…
–
CVSS
1.1%
EPSS
No
On KEV
Description
Multiple SQL injection vulnerabilities in iPostMX 2005 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) forum parameter in messagepost.cfm and (2) topic parameter in topics.cfm. NOTE: this item was created based on information in a blog entry that was apparently removed after CVE analysis. As of 20060619, CVE is attempting to determine the cause of the removal.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 66% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
I2
Ipostmx 2005 · Ipostmx
through 2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-3096
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-3096
pridels0.blogspot.com
http://pridels0.blogspot.com/2006/06/ipostmx-2005-vuln.html
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/27144
More from Ipostmx 2005
–
CVE-2006-3095
Multiple cross-site scripting (XSS) vulnerabilities in iPostMX 2005 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the RETURNURL parameter in…