CVE-2006-6094
ActiveNews Manager - SQL Injection via catID, articleID, or query Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2006-6094. PoCs published by laurent gaffie.
AI-analyzed exploit summary The provided text describes SQL injection and XSS vulnerabilities in Active News Manager, but lacks actual exploit code. It references a URL parameter vulnerable to SQL injection without demonstrating exploitation.
Description
Multiple SQL injection vulnerabilities in ActiveNews Manager allow remote attackers to execute arbitrary SQL commands via the (1) catID parameter to activeNews_categories.asp, the (2) articleID parameter to activeNews_comments.asp, or the (3) query parameter to activenews_search.asp.
Exploits (2)
The provided text describes SQL injection and XSS vulnerabilities in Active News Manager, but lacks actual exploit code. It references a URL parameter vulnerable to SQL injection without demonstrating exploitation.
The provided text describes SQL injection and XSS vulnerabilities in Active News Manager but lacks actual exploit code. It references a generic example URL for SQL injection without technical details or payloads.