CVEvulnerability
CVE-2006-2300
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-05-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Multiple SQL injection vulnerabilities in EImagePro allow remote attackers to execute arbitrary SQL commands via the (1) CatID parameter to subList.asp, (2) SubjectID parameter to imageList.asp, or (3) Pic parameter to view.asp.
Affected configurations
• keyvan1 eimagepro
References
- http://downloads.securityfocus.com/vulnerabilities/exploits/eimagepro-xss.txt Exploit
- http://secunia.com/advisories/20043 Exploit, Vendor Advisory
- http://www.osvdb.org/25331 www.osvdb.org
- http://www.osvdb.org/25332 www.osvdb.org
- http://www.osvdb.org/25333 www.osvdb.org
- http://www.securityfocus.com/bid/17911 Exploit
- http://www.vupen.com/english/advisories/2006/1749 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26343 exchange.xforce.ibmcloud.com
- http://downloads.securityfocus.com/vulnerabilities/exploits/eimagepro-xss.txt Exploit
- http://secunia.com/advisories/20043 Exploit, Vendor Advisory
- http://www.osvdb.org/25331 www.osvdb.org
- http://www.osvdb.org/25332 www.osvdb.org
- http://www.osvdb.org/25333 www.osvdb.org
- http://www.securityfocus.com/bid/17911 Exploit
- http://www.vupen.com/english/advisories/2006/1749 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26343 exchange.xforce.ibmcloud.com