Vulnerabilities > CVE-2006-3932 - SQL-Injection vulnerability in Gonafish Linkscaffe 3.0

047910
CVSS 5.1 - MEDIUM
Attack vector
NETWORK
Attack complexity
HIGH
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
high complexity
gonafish

Summary

SQL injection vulnerability in links.php in Gonafish LinksCaffe 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Successful exploitation via the "cat" parameter requires that "magic_quotes_gpc" is disabled.

Vulnerable Configurations

Part Description Count
Application
Gonafish
1