CVE-2006-0939

SQL injection vulnerability in DCI-Taskeen 1.03 allows remote attackers to execute arbitrary SQL commands via the (1) id or (2) action parameter to (a) basket.php, or (3) id or (4) page parameter to (b) cat.php.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

1.17% chance of exploitation in the next 30 days, 65th percentile

Published

2006-03-01

Updated

2024-08-07

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/27314
• https://www.exploit-db.com/exploits/27313

References

• CVE Record
• NVD entry

Related

• CVE-2006-0936
• CVE-2006-0940
• CVE-2006-0933
• CVE-2006-0942
• CVE-2006-0927
• CVE-2006-0943