CVE-2006-6342
KLF-REALTY - SQL Injection via Category, Agent, or Property ID Parameters
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2006-6342. PoCs published by laurent gaffie.
AI-analyzed exploit summary The provided text describes SQL injection vulnerabilities in Klf-Realty software, with example URLs demonstrating how unsanitized input can be exploited. No actual exploit code is present, only a description and proof-of-concept URLs.
Description
Multiple SQL injection vulnerabilities in KLF-DESIGN (aka Kim L. Fraser) KLF-REALTY allow remote attackers to execute arbitrary SQL commands via the (1) category and (2) agent parameters in (a) search_listing.asp, and the (3) property_id parameter in (b) detail.asp.
Exploits (2)
The provided text describes SQL injection vulnerabilities in Klf-Realty software, with example URLs demonstrating how unsanitized input can be exploited. No actual exploit code is present, only a description and proof-of-concept URLs.
The provided text describes a SQL injection vulnerability in Klf-Realty software, where the 'property_id' parameter in 'detail.asp' is not properly sanitized. It includes a basic example URL for exploitation but lacks actual exploit code.