CVE

Id
21989  
CVE No.
CVE-2006-5885  
Status
Candidate  
Description
SQL injection vulnerability in Products.asp in NuStore 1.0 allows remote attackers to execute arbitrary SQL commands via the SubCatagoryID parameter.  
Phase
Assigned (20061114)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
211683 21989 CVE-2006-5885 BUGTRAQ:20061111 NuStore 1.0 (Products.asp) Remote SQL Injection Vulnerability  View
211684 21989 CVE-2006-5885 URL:http://www.securityfocus.com/archive/1/archive/1/451334/100/0/threaded  View
211685 21989 CVE-2006-5885 MILW0RM:2756  View
211686 21989 CVE-2006-5885 URL:http://milw0rm.com/exploits/2756  View
211687 21989 CVE-2006-5885 BID:21019  View
211688 21989 CVE-2006-5885 URL:http://www.securityfocus.com/bid/21019  View
211689 21989 CVE-2006-5885 VUPEN:ADV-2006-4472  View
211690 21989 CVE-2006-5885 URL:http://www.vupen.com/english/advisories/2006/4472  View
211691 21989 CVE-2006-5885 SECTRACK:1017216  View
211692 21989 CVE-2006-5885 URL:http://securitytracker.com/id?1017216  View
211693 21989 CVE-2006-5885 SECUNIA:22829  View
211694 21989 CVE-2006-5885 URL:http://secunia.com/advisories/22829  View
211695 21989 CVE-2006-5885 SREASON:1856  View
211696 21989 CVE-2006-5885 URL:http://securityreason.com/securityalert/1856  View
211697 21989 CVE-2006-5885 XF:nustore-products-sql-injection(30195)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59277 JVNDB-2006-001543 Dynamic Dataworx NuSchool の CampusNewsDetails.asp における SQL インジェクションの脆弱性 Dynamic Dataworx NuSchool の CampusNewsDetails.asp には、SQL インジェクションの脆弱性が存在します。 CVE-2006-5887 21989 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001543.html  View