CVE-2006-6152
vSpin.net Classified System 2004 - SQL Injection via cat Parameter or search.asp Parameters
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2006-6152. PoCs published by laurent gaffie.
AI-analyzed exploit summary The provided text describes SQL injection vulnerabilities in vSpin Classified System, detailing multiple attack vectors via the 'search.asp' endpoint. It does not contain executable exploit code but outlines injection points for manual exploitation.
Description
Multiple SQL injection vulnerabilities in vSpin.net Classified System 2004 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to (a) cat.asp, or the (2) keyword, (3) order, (4) sort, (5) menuSelect, or (6) state parameter to (b) search.asp.
Exploits (2)
The provided text describes SQL injection vulnerabilities in vSpin Classified System, detailing multiple attack vectors via the 'search.asp' endpoint. It does not contain executable exploit code but outlines injection points for manual exploitation.
The provided text describes SQL injection and XSS vulnerabilities in vSpin Classified System due to insufficient input sanitization. It includes a basic example URL for SQL injection but lacks executable exploit code.