CVE

Id
23041  
CVE No.
CVE-2006-6937  
Status
Candidate  
Description
SQL injection vulnerability in displaypic.asp in Xtreme ASP Photo Gallery allows remote attackers to inject arbitrary SQL commands via the sortorder parameter.  
Phase
Assigned (20070116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
222492 23041 CVE-2006-6937 BUGTRAQ:20061116 Xtreme ASP Photo Gallery Cross Site Scripting And SQL Injection  View
222493 23041 CVE-2006-6937 URL:http://www.securityfocus.com/archive/1/archive/1/451786/100/0/threaded  View
222494 23041 CVE-2006-6937 MISC:http://aria-security.net/advisory/xtremeg.txt  View
222495 23041 CVE-2006-6937 BID:21138  View
222496 23041 CVE-2006-6937 URL:http://www.securityfocus.com/bid/21138  View
222497 23041 CVE-2006-6937 OSVDB:31507  View
222498 23041 CVE-2006-6937 URL:http://www.osvdb.org/31507  View
222499 23041 CVE-2006-6937 SREASON:2148  View
222500 23041 CVE-2006-6937 URL:http://securityreason.com/securityalert/2148  View
222501 23041 CVE-2006-6937 XF:xtremeasp-displaypic-sql-injection(30324)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52548 JVNDB-2007-001240 GNU ed における任意のファイルを上書きされる脆弱性 GNU ed には、任意のファイルを上書きされる脆弱性が存在します。 CVE-2006-6939 23041 4.6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001240.html  View