Vulnerabilities > CVE-2006-6937 - Input Validation vulnerability in Pensacola web Designs Xtremeasp Photogallery 2.0

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
pensacola-web-designs
exploit available
NVD
Published: 2007-01-17
Updated: 2018-10-16

Summary

SQL injection vulnerability in displaypic.asp in Xtreme ASP Photo Gallery allows remote attackers to inject arbitrary SQL commands via the sortorder parameter.

Vulnerable Configurations

Part Description Count
Application
Pensacola_Web_Designs
1

Exploit-Db

descriptionXtreme ASP Photo Gallery 2.0 displaypic.asp sortorder Parameter SQL Injection. CVE-2006-6937. Webapps exploit for asp platform
idEDB-ID:29063
last seen2016-02-03
modified2006-11-16
published2006-11-16
reporterAria-Security Team
sourcehttps://www.exploit-db.com/download/29063/
titleXtreme ASP Photo Gallery 2.0 displaypic.asp sortorder Parameter SQL Injection

References