CVE-2006-0115

EPSS 1.3%

Multiple SQL injection vulnerabilities in OnePlug Solutions OnePlug CMS allow remote attackers to execute arbitrary SQL commands via the (1) Press_Release_ID parameter in press/details.asp, (2) Service_ID parameter in services/details.asp, and (3) Product_ID parameter in products/details.asp.

Affected products

n/a · n/a

public PoCs found — 3

exploitdbwww.exploit-db.com/exploits/27034unverified exploitdbwww.exploit-db.com/exploits/27036unverified exploitdbwww.exploit-db.com/exploits/27035unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/ref/22/22248-oneplug.txt http://secunia.com/advisories/18325 http://www.osvdb.org/22248 http://www.osvdb.org/22249 http://www.osvdb.org/22250 http://www.securityfocus.com/bid/16155 http://www.vupen.com/english/advisories/2006/0079