Vulnerabilities > CVE-2006-3822 - SQL Injection vulnerability in Geodesicsolutions Geoauctions Enterprise 1.0.6

047910
CVSS 5.1 - MEDIUM
Attack vector
NETWORK
Attack complexity
HIGH
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
high complexity
geodesicsolutions
exploit available
NVD
Published: 2006-07-25
Updated: 2011-03-08

Summary

SQL injection vulnerability in index.php in GeodesicSolutions GeoAuctions Enterprise 1.0.6 allows remote attackers to execute arbitrary SQL commands via the d parameter. Successful exploitation requires that the 'accumulative feedback' feature is turned on.

Vulnerable Configurations

Part Description Count
Application
Geodesicsolutions
1

Exploit-Db

descriptionGeoAuctions 1.0.6 Enterprise index.php d Parameter SQL Injection. CVE-2006-3822. Webapps exploit for php platform
idEDB-ID:28249
last seen2016-02-03
modified2006-07-20
published2006-07-20
reporterLBDT
sourcehttps://www.exploit-db.com/download/28249/
titleGeoAuctions 1.0.6 Enterprise index.php d Parameter SQL Injection

References