CVE-2006-6367

DUware DUdownload <1.1 - SQL Injection

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-6367. PoCs published by Aria-Security Team.

AI-analyzed exploit summary This is a writeup describing SQL injection vulnerabilities in multiple DuWare products. It provides example URLs where user-supplied input is not properly sanitized, allowing SQL injection attacks.

Description

Multiple SQL injection vulnerabilities in detail.asp in DUware DUdownload 1.1, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) iFile or (2) action parameter. NOTE: the iType parameter is already covered by CVE-2005-3976.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Aria-Security Team · textwebappsasp
https://www.exploit-db.com/exploits/29219

This is a writeup describing SQL injection vulnerabilities in multiple DuWare products. It provides example URLs where user-supplied input is not properly sanitized, allowing SQL injection attacks.

Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Theoretical
Target: DuWare products (version not specified)
No auth needed
Prerequisites: Access to the vulnerable web application
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (6)

Core 6
Core References
Exploit, Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/21405
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/30669
Not Applicable vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/4845
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/23224
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=116508632603388&w=2

Scores

EPSS 0.0153
EPSS Percentile 71.4%

Details

CWE
CWE-89
Status published
Products (8)
duware/dudownload 1.0
duware/dudownload 1.1
duware/dunews 1.0
duware/dunews 1.1
duware/dupaypal 3.0
duware/dupaypal 3.1
duware/dupaypal pro_3.0
duware/dupaypal pro_3.1
Published Dec 07, 2006
Tracked Since Feb 18, 2026