CVE-2006-6147
JiRos Links Manager - SQL Injection via LinkID or CategoryID Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2006-6147. PoCs published by laurent gaffie.
AI-analyzed exploit summary The provided text describes a SQL injection vulnerability in JiRos Links Manager due to insufficient input sanitization. It includes a basic example URL demonstrating the vulnerability but lacks executable exploit code.
Description
Multiple SQL injection vulnerabilities in JiRos Links Manager allow remote attackers to execute arbitrary SQL commands via the (1) LinkID parameter to openlink.asp or the (2) CategoryID parameter to viewlinks.asp.
Exploits (2)
The provided text describes a SQL injection vulnerability in JiRos Links Manager due to insufficient input sanitization. It includes a basic example URL demonstrating the vulnerability but lacks executable exploit code.
The provided text describes SQL and HTML injection vulnerabilities in JiRos Links Manager due to insufficient input sanitization. It includes a basic example URL demonstrating SQL injection but lacks executable exploit code.