SQL injection vulnerability in index.php in IntegraMOD 1.4.0 and earlier allows remote attackers to execute arbitrary SQL commands via double-encoded "'" characters in the STYLE_URL parameter.
References
Configurations
History
21 Nov 2024, 00:12
Type | Values Removed | Values Added |
---|---|---|
References | () http://securityreason.com/securityalert/1085 - | |
References | () http://www.attrition.org/pipermail/vim/2006-June/000847.html - Exploit | |
References | () http://www.securityfocus.com/archive/1/436457/100/0/threaded - | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/27097 - |
Information
Published : 2006-06-13 01:02
Updated : 2025-04-03 01:03
NVD link : CVE-2006-2985
Mitre link : CVE-2006-2985
CVE.ORG link : CVE-2006-2985
JSON object : View
Products Affected
integramod
- integramod
CWE