Unscored severity · published Nov 28, 2006
CVE-2006-6152
Multiple SQL injection vulnerabilities in vSpin.net Classified System 2004 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to (a) cat.asp, or…
–
CVSS
1.3%
EPSS
No
On KEV
Description
Multiple SQL injection vulnerabilities in vSpin.net Classified System 2004 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to (a) cat.asp, or the (2) keyword, (3) order, (4) sort, (5) menuSelect, or (6) state parameter to (b) search.asp.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CS
Classified System · Vspin.net
2004 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-6152
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-6152
URL Repurposed
http://s-a-p.ca/index.php?page=OurAdvisories&id=47
Vendor Advisory
http://secunia.com/advisories/22987
securityreason.com
http://securityreason.com/securityalert/1926
securitytracker.com
http://securitytracker.com/id?1017259
www.securityfocus.com
http://www.securityfocus.com/archive/1/452179/100/100/threaded
Exploit
http://www.securityfocus.com/bid/21190
More from Classified System
–
CVE-2006-6153
Multiple cross-site scripting (XSS) vulnerabilities in vSpin.net Classified System 2004 allow remote attackers to inject arbitrary web script or HTML via (1) catname parameter to…