CVE-2006-1001

Lansuite Lanparty Intranet System - SQL Injection

Title source: rule

Description

SQL injection vulnerability in the board module in LanSuite LanParty Intranet System 2.0.6 and 2.1.0 beta allows remote attackers to execute arbitrary SQL commands via the fid parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by x128 · phpwebappsphp

https://www.exploit-db.com/exploits/1526

View Code ZIP pw:eip

References (6)

[Third Party Advisory] http://www.vupen.com/english/advisories/2006/0747

[Exploit, Vendor Advisory] http://www.securityfocus.com/bid/16836

[Third Party Advisory, VDB Entry] http://www.osvdb.org/23533

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/1526

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/24940

[Vendor Advisory] http://secunia.com/advisories/19048

Scores

EPSS 0.0204

EPSS Percentile 83.9%

Details

Status published

Products (2)

lansuite/lanparty_intranet_system 2.0.6

lansuite/lanparty_intranet_system 2.1

Published Mar 06, 2006

Tracked Since Feb 18, 2026