Vulnerabilities > CVE-2006-4524 - SQL Injection vulnerability in Digiappz Freekot 1.01

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
digiappz
exploit available
NVD
Published: 2006-09-01
Updated: 2018-10-17

Summary

Multiple SQL injection vulnerabilities in login_verif.asp in Digiappz Freekot 1.01 allow remote attackers to execute arbitrary SQL commands via the (1) login or (2) password parameters. NOTE: some of these details are obtained from third party information.

Vulnerable Configurations

Part Description Count
Application
Digiappz
2

Exploit-Db

  • descriptionfreekot (auth bypass) SQL Injection Vulnerability. CVE-2006-4524. Webapps exploit for asp platform
    idEDB-ID:10496
    last seen2016-02-01
    modified2009-12-16
    published2009-12-16
    reporterR3d-D3V!L
    sourcehttps://www.exploit-db.com/download/10496/
    titlefreekot auth bypass SQL Injection Vulnerability
  • descriptionDigiappz Freekot 1.01 ASP SQL Injection Vulnerability. CVE-2006-4524. Webapps exploit for asp platform
    idEDB-ID:28443
    last seen2016-02-03
    modified2006-08-30
    published2006-08-30
    reporterFarhadKey
    sourcehttps://www.exploit-db.com/download/28443/
    titleDigiappz Freekot 1.01 ASP SQL Injection Vulnerability

References