CVEvulnerability
CVE-2006-6132
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-11-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Multiple SQL injection vulnerabilities in Link Exchange Lite allow remote attackers to execute arbitrary SQL commands via (1) the search engine field to search.asp and (2) psearch parameter to linkslist.asp.
Affected configurations
• softacid link exchange lite 1.0
References
- http://s-a-p.ca/index.php?page=OurAdvisories&id=53 Exploit, Vendor Advisory, URL Repurposed
- http://secunia.com/advisories/23068 Exploit, Vendor Advisory
- http://securityreason.com/securityalert/1920 securityreason.com
- http://www.securityfocus.com/archive/1/452256/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/21239 Exploit
- http://www.vupen.com/english/advisories/2006/4656 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30460 exchange.xforce.ibmcloud.com
- http://s-a-p.ca/index.php?page=OurAdvisories&id=53 Exploit, Vendor Advisory, URL Repurposed
- http://secunia.com/advisories/23068 Exploit, Vendor Advisory
- http://securityreason.com/securityalert/1920 securityreason.com
- http://www.securityfocus.com/archive/1/452256/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/21239 Exploit
- http://www.vupen.com/english/advisories/2006/4656 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30460 exchange.xforce.ibmcloud.com