CVE-2006-6195
Fixit iDMS Pro Image Gallery - SQL Injection via show_id, parentid, or fid Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2006-6195. PoCs published by Aria-Security Team.
AI-analyzed exploit summary The provided text describes SQL injection and HTML injection vulnerabilities in Fixit iDMS Pro, but does not include actual exploit code. It references a generic example URL for SQL injection without implementation details.
Description
Multiple SQL injection vulnerabilities in Fixit iDMS Pro Image Gallery allow remote attackers to execute arbitrary SQL commands via the (1) show_id or (2) parentid parameter to (a) filelist.asp, or the (3) fid parameter to (b) showfile.asp.
Exploits (2)
The provided text describes SQL injection and HTML injection vulnerabilities in Fixit iDMS Pro, but does not include actual exploit code. It references a generic example URL for SQL injection without implementation details.
The provided text describes SQL injection vulnerabilities in Fixit iDMS Pro, detailing vulnerable parameters in specific URLs. No actual exploit code is present, only a vulnerability description.