CVEvulnerability
CVE-2006-6367
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-12-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in detail.asp in DUware DUdownload 1.1, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) iFile or (2) action parameter. NOTE: the iType parameter is already covered by CVE-2005-3976.
Affected configurations
• duware dudownload 1.0
• duware dudownload 1.1
• duware dunews 1.0
• duware dunews 1.1
• duware dupaypal 3.0
• duware dupaypal 3.1
• duware dupaypal pro 3.0
• duware dupaypal pro 3.1
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://marc.info/?l=bugtraq&m=116508632603388&w=2 Mailing List
- http://secunia.com/advisories/23224 Vendor Advisory
- http://www.aria-security.com/forum/showthread.php?t=60 Broken Link
- http://www.securityfocus.com/bid/21405 Exploit, Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2006/4845 Not Applicable
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30669 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=116508632603388&w=2 Mailing List
- http://secunia.com/advisories/23224 Vendor Advisory
- http://www.aria-security.com/forum/showthread.php?t=60 Broken Link
- http://www.securityfocus.com/bid/21405 Exploit, Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2006/4845 Not Applicable
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30669 exchange.xforce.ibmcloud.com