CVE-2006-2126

EPSS 1.2%

SQL injection vulnerability in pocategories.php in MaxTrade 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) categori and (2) stranica parameters.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/27787unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://pridels0.blogspot.com/2006/04/maxtrade-sql-inj.html http://secunia.com/advisories/19876 https://exchange.xforce.ibmcloud.com/vulnerabilities/26171 http://www.osvdb.org/25122 http://www.securityfocus.com/bid/17765 http://www.vupen.com/english/advisories/2006/1581