Vulnerabilities > CVE-2006-2042 - SQL Injection vulnerability in Adobe Dreamweaver Generated Code

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
adobe
NVD
Published: 2006-05-09
Updated: 2017-07-20

Summary

Adobe Dreamweaver 8 before 8.0.2 and MX 2004 can generate code that allows SQL injection attacks in the (1) ColdFusion, (2) PHP mySQL, (3) ASP, (4) ASP.NET, and (5) JSP server models. This vulnerability affects all versions of Adobe, Dreamweaver, 8.0 before 8.0.2 This vulnerability is addressed in the following product releases: Adobe, Dreamweaver, 8.0.2 Code update for Macromedia, Dreamweaver MX, 2004

Vulnerable Configurations

Part Description Count
Application
Adobe
2

References