← back
CVE-2006-5145

CVE-2006-5145

EPSS 1.1%
Multiple SQL injection vulnerabilities in OlateDownload 3.4.0 allow remote attackers to execute arbitrary SQL commands via the (1) page parameter in details.php or the (2) query parameter in search.php.
Affected products
n/a · n/a
public PoCs found — 2
exploitdbwww.exploit-db.com/exploits/28730unverifiedexploitdbwww.exploit-db.com/exploits/28731unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://secunia.com/advisories/22241http://securityreason.com/securityalert/1680https://exchange.xforce.ibmcloud.com/vulnerabilities/29294http://www.securityfocus.com/archive/1/447424/100/0/threadedhttp://www.securityfocus.com/bid/20278