CVE-2006-6355

DuWare DuClassmate - SQL Injection via iCity Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-6355. PoCs published by Aria-Security Team.

AI-analyzed exploit summary This is a writeup describing an SQL injection vulnerability in DUClassmate. It provides a high-level overview of the issue and a sample URL for exploitation but lacks actual exploit code.

Description

SQL injection vulnerability in default.asp in DuWare DuClassmate allows remote attackers to execute arbitrary SQL commands via the iCity parameter. NOTE: the iState parameter is already covered by CVE-2005-2049.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Aria-Security Team · textwebappsasp
https://www.exploit-db.com/exploits/30250

This is a writeup describing an SQL injection vulnerability in DUClassmate. It provides a high-level overview of the issue and a sample URL for exploitation but lacks actual exploit code.

Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Theoretical
Target: DUClassmate (version not specified)
No auth needed
Prerequisites: Access to the vulnerable application URL
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/30672
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/1997
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/24637
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/453318/100/0/threaded

Scores

EPSS 0.0172
EPSS Percentile 74.5%

Details

Status published
Products (1)
duware/duclassmate
Published Dec 07, 2006
Tracked Since Feb 18, 2026