CVE-2006-6021

SQL injection vulnerability in the login component in BestWebApp Dating Site allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) passwd parameters.

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

1.23% chance of exploitation in the next 30 days, 68th percentile

Published

2006-11-21

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/29080

Security advisories

• http://secunia.com/advisories/23017
• http://www.securityfocus.com/bid/21158

References

• CVE Record
• NVD entry