Vulnerabilities > CVE-2006-6446 - SQL Injection vulnerability in Iware Professional 5.0.4

047910
CVSS 6.8 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
iware
exploit available
NVD
Published: 2006-12-10
Updated: 2017-07-29

Summary

SQL injection vulnerability in index.php in iWare Professional 5.0.4, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the D parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

Vulnerable Configurations

Part Description Count
Application
Iware
1

Exploit-Db

descriptioniWare CMS 5.0.4 Multiple Remote SQL Injection Vulnerabilities. CVE-2006-6446. Webapps exploit for php platform
idEDB-ID:8305
last seen2016-02-01
modified2009-03-29
published2009-03-29
reporterboom3rang
sourcehttps://www.exploit-db.com/download/8305/
titleiWare CMS 5.0.4 - Multiple Remote SQL Injection Vulnerabilities

References