CVE-2006-0115
OnePlug CMS - SQL Injection via Press_Release_ID, Service_ID, or Product_ID Parameter
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2006-0115. PoCs published by Preddy.
AI-analyzed exploit summary The provided text describes a SQL injection vulnerability in OnePlug CMS, where the 'Service_ID' parameter in 'details.asp' is not properly sanitized. This allows attackers to manipulate SQL queries, potentially compromising the application or underlying database.
Description
Multiple SQL injection vulnerabilities in OnePlug Solutions OnePlug CMS allow remote attackers to execute arbitrary SQL commands via the (1) Press_Release_ID parameter in press/details.asp, (2) Service_ID parameter in services/details.asp, and (3) Product_ID parameter in products/details.asp.
Exploits (3)
The provided text describes a SQL injection vulnerability in OnePlug CMS, where the 'Service_ID' parameter in 'details.asp' is not properly sanitized. This allows attackers to manipulate SQL queries, potentially compromising the application or underlying database.
The provided text describes a SQL injection vulnerability in OnePlug CMS, where the 'Product_ID' parameter in 'details.asp' is not properly sanitized. This allows attackers to manipulate SQL queries, potentially compromising the application or underlying database.
The provided text describes a SQL injection vulnerability in OnePlug CMS, where the 'Press_Release_ID' parameter in 'details.asp' is not properly sanitized. It lacks actual exploit code, serving only as a vulnerability description.