Vulnerabilities > CVE-2006-4872 - Unspecified vulnerability in Keyvan1 Ecardpro 2.0
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN keyvan1
exploit available
Summary
SQL injection vulnerability in search.asp in Keyvan1 (aka Keyvan Janghorbani) ECardPro 2.0 allows remote attackers to execute arbitrary SQL commands via the keyword parameter.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |
Exploit-Db
description | ECardPro 2.0 Search.ASP SQL Injection Vulnerability. CVE-2006-4872. Webapps exploit for asp platform |
id | EDB-ID:28597 |
last seen | 2016-02-03 |
modified | 2006-09-18 |
published | 2006-09-18 |
reporter | ajann |
source | https://www.exploit-db.com/download/28597/ |
title | ECardPro 2.0 - Search.ASP SQL Injection Vulnerability |
References
- http://secunia.com/advisories/22013
- http://secunia.com/advisories/22013
- http://securityreason.com/securityalert/1609
- http://securityreason.com/securityalert/1609
- http://securitytracker.com/id?1016882
- http://securitytracker.com/id?1016882
- http://www.securityfocus.com/archive/1/446319/100/0/threaded
- http://www.securityfocus.com/archive/1/446319/100/0/threaded
- http://www.securityfocus.com/bid/20080
- http://www.securityfocus.com/bid/20080
- http://www.vupen.com/english/advisories/2006/3689
- http://www.vupen.com/english/advisories/2006/3689
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29015
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29015