Unscored severity · published Nov 17, 2006
CVE-2006-5954
SQL injection vulnerability in page.asp in NetVIOS 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the NewsID parameter
–
CVSS
1.3%
EPSS
No
On KEV
Description
SQL injection vulnerability in page.asp in NetVIOS 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the NewsID parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NE
Netvios · Netvios
through 2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-5954
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-5954
Vendor Advisory
http://secunia.com/advisories/22901
www.osvdb.org
http://www.osvdb.org/30411
www.securityfocus.com
http://www.securityfocus.com/bid/21088
www.vupen.com
http://www.vupen.com/english/advisories/2006/4517
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/30277
www.exploit-db.com
https://www.exploit-db.com/exploits/2780
More from Netvios
–
CVE-2007-1566
SQL injection vulnerability in News/page.asp in NetVIOS Portal allows remote attackers to execute arbitrary SQL commands via the NewsID parameter