CVE-2006-5145

Multiple SQL injection vulnerabilities in OlateDownload 3.4.0 allow remote attackers to execute arbitrary SQL commands via the (1) page parameter in details.php or the (2) query parameter in search.php.

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

1.12% chance of exploitation in the next 30 days, 66th percentile

Published

2006-10-02

Updated

2024-08-07

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/28731
• https://www.exploit-db.com/exploits/28730

Security advisories

• http://www.securityfocus.com/bid/20278

References

• CVE Record
• NVD entry