Vulnerabilities > CVE-2006-4612 - SQL Injection vulnerability in John Andersson Zixforum 1.12

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
john-andersson
exploit available
NVD
Published: 2006-09-07
Updated: 2018-10-17

Summary

SQL injection vulnerability in ReplyNew.asp in ZIXForum 1.12 allows remote attackers to execute arbitrary SQL commands via the RepId parameter.

Vulnerable Configurations

Part Description Count
Application
John_Andersson
1

Exploit-Db

descriptionZix Forum <= 1.12 (RepId) Remote SQL Injection Vulnerability. CVE-2006-4612. Webapps exploit for asp platform
idEDB-ID:2306
last seen2016-01-31
modified2006-09-05
published2006-09-05
reporterChironex Fleckeri
sourcehttps://www.exploit-db.com/download/2306/
titleZix Forum <= 1.12 RepId Remote SQL Injection Vulnerability

References