CVE-2006-1852

Scriptsfrenzy Article Publisher Pro < 1.0.1 - SQL Injection

Title source: rule
STIX 2.1

Description

SQL injection vulnerability in category.php in Article Publisher Pro 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cname parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by r0t · textwebappsphp
https://www.exploit-db.com/exploits/27677

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/25898
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/24730

Scores

EPSS 0.0035
EPSS Percentile 57.4%

Details

Status published
Products (1)
scriptsfrenzy/article_publisher_pro < 1.0.1
Published Apr 19, 2006
Tracked Since Feb 18, 2026