CVE-2006-6094

Dotnetindex Active News Manager - SQL Injection

Title source: rule
STIX 2.1

Description

Multiple SQL injection vulnerabilities in ActiveNews Manager allow remote attackers to execute arbitrary SQL commands via the (1) catID parameter to activeNews_categories.asp, the (2) articleID parameter to activeNews_comments.asp, or the (3) query parameter to activenews_search.asp.

Exploits (2)

exploitdb WRITEUP VERIFIED
by laurent gaffie · textwebappsasp
https://www.exploit-db.com/exploits/29090
exploitdb WRITEUP VERIFIED
by laurent gaffie · textwebappsasp
https://www.exploit-db.com/exploits/29089

References (13)

Core 13
Core References
Exploit, Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/21167
Broken Link vdb-entry x_refsource_osvdb
http://www.osvdb.org/30520
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/1910
Not Applicable vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/4600
Broken Link vdb-entry x_refsource_osvdb
http://www.osvdb.org/30518
Exploit, Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/452015
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=116388432326444&w=2
Broken Link, Exploit, Vendor Advisory, URL Repurposed x_refsource_misc
http://s-a-p.ca/index.php?page=OurAdvisories&id=31
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/451884/100/100/threaded
Broken Link vdb-entry x_refsource_osvdb
http://www.osvdb.org/30519
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/30352
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22981

Scores

EPSS 0.0253
EPSS Percentile 85.5%

Details

CWE
CWE-89
Status published
Products (1)
dotnetindex/active_news_manager
Published Nov 24, 2006
Tracked Since Feb 18, 2026