CVE-2006-0939

SQL injection vulnerability in DCI-Taskeen 1.03 allows remote attackers to execute arbitrary SQL commands via the (1) id or (2) action parameter to (a) basket.php, or (3) id or (4) page parameter to (b) cat.php.

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

1.17% chance of exploitation in the next 30 days, 67th percentile

Published

2006-03-01

Updated

2024-08-07

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/27314
• https://www.exploit-db.com/exploits/27313

Security advisories

• http://www.securityfocus.com/bid/16828

References

• CVE Record
• NVD entry