Vulnerabilities > CVE-2006-5641 - SQL Injection vulnerability in Techno Dreams Announcement MainAnnounce2.ASP

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
techno-dreams
exploit available
NVD
Published: 2006-11-01
Updated: 2017-10-19

Summary

SQL injection vulnerability in MainAnnounce2.asp in Techno Dreams Announcement allows remote attackers to execute arbitrary SQL commands via the key parameter.

Vulnerable Configurations

Part Description Count
Application
Techno_Dreams
1

Exploit-Db

descriptionTechno Dreams Announcement (key) Remote SQL Injection Vulnerability. CVE-2006-5641. Webapps exploit for asp platform
fileexploits/asp/webapps/2683.txt
idEDB-ID:2683
last seen2016-01-31
modified2006-10-30
platformasp
port
published2006-10-30
reporterajann
sourcehttps://www.exploit-db.com/download/2683/
titleTechno Dreams Announcement key Remote SQL Injection Vulnerability
typewebapps

References