← back
CVE-2006-6349

CVE-2006-6349

EPSS 2.0%
Multiple SQL injection vulnerabilities in PWP Technologies The Classified Ad System allow remote attackers to execute arbitrary SQL commands via (1) the main parameter in a view action (includes/mainpage/view.asp) in default.asp or (2) a query in the search engine.
Affected products
n/a · n/a
public PoCs found — 1
cve_referencewww.exploit-db.com/exploits/3015unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://secunia.com/advisories/23289http://securityreason.com/securityalert/1975https://exchange.xforce.ibmcloud.com/vulnerabilities/30443https://www.exploit-db.com/exploits/3015http://www.securityfocus.com/archive/1/452194/100/200/threadedhttp://www.securityfocus.com/bid/21198http://www.securityfocus.com/bid/21758http://www.vupen.com/english/advisories/2006/5192