Vulnerabilities > CVE-2006-5662 - SQL Injection vulnerability in Evandor Easy Notesmanager 0.0.1
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
SQL injection vulnerability in easy notesManager (eNM) 0.0.1 allows remote attackers to execute arbitrary SQL commands via (1) the username parameter in login.php and (2) a search on the "search page."
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |
Exploit-Db
description Evandor Easy notesManager 0.0.1 login.php username Parameter SQL Injection. CVE-2006-5662. Webapps exploit for asp platform id EDB-ID:28878 last seen 2016-02-03 modified 2006-10-30 published 2006-10-30 reporter poplix source https://www.exploit-db.com/download/28878/ title Evandor Easy notesManager 0.0.1 login.php username Parameter SQL Injection description Evandor Easy notesManager 0.0.1 Search Page SQL Injection. CVE-2006-5662. Webapps exploit for asp platform id EDB-ID:28879 last seen 2016-02-03 modified 2006-10-30 published 2006-10-30 reporter poplix source https://www.exploit-db.com/download/28879/ title Evandor Easy notesManager 0.0.1 - Search Page SQL Injection