20317Third-party advisory
http://secunia.com/advisories/20317 CVE-2006-2732
Mini-NUKE 2.3 - 'Your_Account.asp' Multiple SQL Injections
Record summary
CVE-2006-2732 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
SQL injection vulnerability in Your_Account.asp in Mini-Nuke 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) yas_1, (2) yas_2, and (3) yas_3 parameters.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBMini-NUKE 2.3 - 'Your_Account.asp' Multiple SQL InjectionsExploitDB exploitby Mustafa Can BjornNot analyzed1 file
References
101002Third-party advisory
http://securityreason.com/securityalert/1002 1016170vdb entry
http://securitytracker.com/id?1016170 nukedx.com
http://www.nukedx.com/?getxpl=31 nukedx.com
http://www.nukedx.com/?viewdoc=31 20060528 Advisory: MiniNuke v2.x Multiple Remote Vulnerabilitiesmailing list
http://www.securityfocus.com/archive/1/435279/100/0/threaded 18126vdb entry
http://www.securityfocus.com/bid/18126 ADV-2006-2031vdb entry
http://www.vupen.com/english/advisories/2006/2031 mininuke-youraccount-sql-injection(26816)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/26816 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2006-2732