CVE-2006-2179

Multiple SQL injection vulnerabilities in CyberBuild allow remote attackers to execute arbitrary SQL commands via the (1) SessionID parameter to login.asp or (2) ProductIndex parameter to browse0.htm.

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

2.67% chance of exploitation in the next 30 days, 86th percentile

Published

2006-05-04

Updated

2024-08-07

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/27814
• https://www.exploit-db.com/exploits/27813

Security advisories

• http://secunia.com/advisories/19889
• http://www.securityfocus.com/bid/17829

References

• CVE Record
• NVD entry