CVE-2006-2179

EPSS 2.7%

Multiple SQL injection vulnerabilities in CyberBuild allow remote attackers to execute arbitrary SQL commands via the (1) SessionID parameter to login.asp or (2) ProductIndex parameter to browse0.htm.

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/27814unverified exploitdbwww.exploit-db.com/exploits/27813unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://pridels0.blogspot.com/2006/05/cyberbuild-vuln.html http://secunia.com/advisories/19889 https://exchange.xforce.ibmcloud.com/vulnerabilities/26201 http://www.osvdb.org/25195 http://www.osvdb.org/25196 http://www.securityfocus.com/bid/17829 http://www.vupen.com/english/advisories/2006/1630