Vulnerabilities > CVE-2006-6181 - Unspecified vulnerability in Clicktech Clickcontact
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN clicktech
exploit available
Summary
Multiple SQL injection vulnerabilities in default.asp in ClickTech ClickContact allow remote attackers to execute arbitrary SQL commands via the (1) AlphaSort, (2) In, and (3) orderby parameters.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Exploit-Db
| description | ClickContact Default.ASP Multiple SQL Injection Vulnerabilities. CVE-2006-6181. Webapps exploit for asp platform |
| id | EDB-ID:29191 |
| last seen | 2016-02-03 |
| modified | 2006-11-27 |
| published | 2006-11-27 |
| reporter | Aria-Security Team |
| source | https://www.exploit-db.com/download/29191/ |
| title | ClickContact Default.ASP Multiple SQL Injection Vulnerabilities |
References
- http://secunia.com/advisories/23119
- http://secunia.com/advisories/23119
- http://www.aria-security.com/forum/showthread.php?t=51
- http://www.aria-security.com/forum/showthread.php?t=51
- http://www.securityfocus.com/archive/1/452825/100/0/threaded
- http://www.securityfocus.com/archive/1/452825/100/0/threaded
- http://www.securityfocus.com/bid/21302
- http://www.securityfocus.com/bid/21302
- http://www.vupen.com/english/advisories/2006/4741
- http://www.vupen.com/english/advisories/2006/4741
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30534
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30534