CVE-2006-0522

SQL injection vulnerability in the Authentication Servlet in Symantec Sygate Management Server (SMS) version 4.1 build 1417 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via unknown attack vectors related to a URL.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

2.75% chance of exploitation in the next 30 days, 85th percentile

Published

2006-02-02

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/1680

References

• CVE Record
• NVD entry

Related

• CVE-2006-0520
• CVE-2006-0524
• CVE-2006-0518
• CVE-2006-0528
• CVE-2006-0515
• CVE-2006-0532