CVE-2006-3996

EPSS 1.7%

SQL injection vulnerability in links/index.php in ATutor 1.5.3.1 and earlier allows remote authenticated users to execute arbitrary SQL commands via the (1) desc or (2) asc parameters.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/2088unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://atutor.ca/news.php#010806 http://retrogod.altervista.org/atutor_1531_sql.html http://secunia.com/advisories/21308 http://securityreason.com/securityalert/1330 https://exchange.xforce.ibmcloud.com/vulnerabilities/28082 https://www.exploit-db.com/exploits/2088 http://www.osvdb.org/27665 http://www.securityfocus.com/archive/1/441711/100/0/threaded http://www.securityfocus.com/bid/19232 http://www.vupen.com/english/advisories/2006/3074