NVD

Id
60751  
Name
CVE-2006-2046  
Description
Multiple SQL injection vulnerabilities in Application Dynamics Cartweaver ColdFusion 2.16.11 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) category and (2) keywords parameters in (a) Results.cfm, and the (3) ProdID parameter in (b) Details.cfm.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-04-26  
Modified Date
2011-03-07  
Seq
2006-2046  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
313683 60751 CVE-2006-2046 http://pridels0.blogspot.com/2006/04/cartweaver-coldfusion-vuln.html  View
313684 60751 CVE-2006-2046 4264  View
313685 60751 CVE-2006-2046 17941  View
313686 60751 CVE-2006-2046 25210  View
313687 60751 CVE-2006-2046 http://www.techfeed.net/blog/index.cfm/2006/4/26/cartweaver-holes  View
313688 60751 CVE-2006-2046 ADV-2006-1513  View
313689 60751 CVE-2006-2046 cartweaver-multiple-sql-injection(26060)  View

Related JVN