CVEvulnerability
CVE-2006-6398
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-12-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Multiple SQL injection vulnerabilities in Superfreaker Studios UPublisher 1.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors in (a) sendarticle.asp and (b) printarticle.asp, and the ID parameter to (c) index.asp and (d) preferences.asp, different vectors than CVE-2006-5888.
Affected configurations
• superfreaker studios upublisher 1.0
References
- http://secunia.com/advisories/22840 Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/453462/100/0/threaded www.securityfocus.com
- http://secunia.com/advisories/22840 Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/453462/100/0/threaded www.securityfocus.com