22398Third-party advisory
http://secunia.com/advisories/22398 CVE-2006-5446
Casinosoft Casino Script 3.2 - 'config.php' SQL Injection
Record summary
CVE-2006-5446 has a selected CVSS score of 5.1; EIP currently links 1 catalogued exploit.
Description
SQL injection vulnerability in lobby/config.php in Casinosoft Casino Script (aka Masvet) 3.2 allows remote attackers to execute arbitrary SQL commands via the cfam parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBCasinosoft Casino Script 3.2 - 'config.php' SQL InjectionExploitDB exploitby G1UKNot analyzed1 file
References
620646vdb entry
http://www.securityfocus.com/bid/20646 securitylab.ru
http://www.securitylab.ru/forum/read.php?FID=16&TID=23884 ADV-2006-4131vdb entry
http://www.vupen.com/english/advisories/2006/4131 casinosoft-config-sql-injection(29684)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/29684 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2006-5446