Vulnerability Details CVE-2006-5881
SQL injection vulnerability in cl_CatListing.asp in Dynamic Dataworx NuCommunity 1.0 allows remote attackers to execute arbitrary SQL commands via the cl_cat_ID parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.013
EPSS Ranking 79.2%
CVSS Severity
CVSS v2 Score 7.5
References
- http://secunia.com/advisories/22827
- http://securityreason.com/securityalert/1853
- http://securitytracker.com/id?1017214
- http://www.securityfocus.com/archive/1/451326/100/0/threaded
- http://www.securityfocus.com/bid/21015
- http://www.vupen.com/english/advisories/2006/4466
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30193
- https://www.exploit-db.com/exploits/2754
- http://secunia.com/advisories/22827
- http://securityreason.com/securityalert/1853
- http://securitytracker.com/id?1017214
- http://www.securityfocus.com/archive/1/451326/100/0/threaded
- http://www.securityfocus.com/bid/21015
- http://www.vupen.com/english/advisories/2006/4466
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30193
- https://www.exploit-db.com/exploits/2754
Products affected by CVE-2006-5881
-
cpe:2.3:a:dynamic_dataworx:nucommunity:1.0