Vulnerabilities > CVE-2006-3666 - SQL-Injection vulnerability in Myiosoft.Com Ajaxportal 3.0

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
myiosoft-com

Summary

SQL injection vulnerability in AjaxPortal 3.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the 'Search' field, a different vulnerability than CVE-2006-3515.

Vulnerable Configurations

Part Description Count
Application
Myiosoft.Com
1