CVE-2006-6220

Multiple SQL injection vulnerabilities in Recipes Website (Recipes Complete Website) 1.1.14 allow remote attackers to execute arbitrary SQL commands via the (1) recipeid parameter to recipe.php or the (2) categoryid parameter to list.php.

CVSS v2.0

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

1.02% chance of exploitation in the next 30 days, 61th percentile

Published

2006-12-01

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/2834

References

• CVE Record
• NVD entry

Related

• CVE-2006-6217
• CVE-2006-6225
• CVE-2006-6216
• CVE-2006-6230
• CVE-2006-6214
• CVE-2006-6231