Vulnerability Details CVE-2006-1852
SQL injection vulnerability in category.php in Article Publisher Pro 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cname parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 56.7%
CVSS Severity
CVSS v2 Score 7.5
References
- http://pridels0.blogspot.com/2006/04/article-publisher-pro-sql-inj.html
- http://www.osvdb.org/24730
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25898
- http://pridels0.blogspot.com/2006/04/article-publisher-pro-sql-inj.html
- http://www.osvdb.org/24730
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25898
Products affected by CVE-2006-1852
-
cpe:2.3:a:scriptsfrenzy:article_publisher_pro:*