Vulnerabilities > CVE-2006-6080 - Unspecified vulnerability in Gazatem Technologies Gnews Publisher
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN gazatem-technologies
exploit available
Summary
Multiple SQL injection vulnerabilities in categories.asp in gNews Publisher allow remote attackers to execute arbitrary SQL commands via the (1) catID or (2) editorID parameter.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |
Exploit-Db
description | Gnews Publisher Multiple SQL Injection Vulnerabilities. CVE-2006-6080 . Webapps exploit for asp platform |
id | EDB-ID:29126 |
last seen | 2016-02-03 |
modified | 2006-11-20 |
published | 2006-11-20 |
reporter | Aria-Security Team |
source | https://www.exploit-db.com/download/29126/ |
title | Gnews Publisher Multiple SQL Injection Vulnerabilities |
References
- http://securityreason.com/securityalert/1908
- http://securityreason.com/securityalert/1908
- http://www.aria-security.com/forum/showthread.php?t=37
- http://www.aria-security.com/forum/showthread.php?t=37
- http://www.securityfocus.com/archive/1/452116/100/0/threaded
- http://www.securityfocus.com/archive/1/452116/100/0/threaded
- http://www.securityfocus.com/bid/21194
- http://www.securityfocus.com/bid/21194
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30422
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30422