CVE-2006-6095
ActiveNews Manager - SQL Injection via articleID or page Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2006-6095. PoCs published by laurent gaffie.
AI-analyzed exploit summary The provided text describes SQL injection and XSS vulnerabilities in Active News Manager but lacks actual exploit code. It references a generic example URL for SQL injection without technical details or payloads.
Description
Multiple SQL injection vulnerabilities in ActiveNews Manager allow remote attackers to execute arbitrary SQL commands via the (1) articleID parameter to activenews_view.asp or the (2) page parameter to default.asp. NOTE: the activeNews_categories.asp and activeNews_comments.asp vectors are already covered by CVE-2006-6094.
Exploits (2)
The provided text describes SQL injection and XSS vulnerabilities in Active News Manager but lacks actual exploit code. It references a generic example URL for SQL injection without technical details or payloads.
The provided text describes SQL injection and XSS vulnerabilities in Active News Manager but does not include functional exploit code. It references a generic example URL for SQL injection without payload details.