Unscored severity · published Oct 30, 2006
CVE-2006-5608
SQL injection vulnerability in Extended Tracker (xtracker) 4.7 before 1.5.2.1 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related…
–
CVSS
1.3%
EPSS
No
On KEV
Description
SQL injection vulnerability in Extended Tracker (xtracker) 4.7 before 1.5.2.1 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to "parameters from URLs."
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ET
Extended Tracker · Drupal
4.7 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-5608
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-5608
Patch
http://drupal.org/node/91358
Vendor Advisory
http://secunia.com/advisories/22566
Exploit
http://www.securityfocus.com/bid/20759
www.vupen.com
http://www.vupen.com/english/advisories/2006/4218
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/29821