PT-2006-3023 · Oracle+3 · Jsp+4

Published 2006-05-09 · Updated 2017-07-20 · CVE-2006-2042

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Adobe Dreamweaver versions 8.0 through 8.0.1 Adobe Dreamweaver MX 2004

Description The issue allows SQL injection attacks in various server models, including ColdFusion, PHP mySQL, ASP, ASP.NET, and JSP.

Recommendations For Adobe Dreamweaver versions 8.0 through 8.0.1, update to version 8.0.2 or later. For Adobe Dreamweaver MX 2004, consider disabling the code generation feature for the affected server models until a patch is available.

Fix

Related Identifiers

CVE-2006-2042

Affected Products

Asp.Net

Dreamweaver

Coldfusion

Jsp

Php

References · 10

• http://adobe.com/support/security/bulletins/apsb06-07.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-2042 · Security Note
• http://osvdb.org/25361 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26339 · Note
• http://vupen.com/english/advisories/2006/1753 · Note
• http://secunia.com/advisories/20054 · Note
• http://securityfocus.com/bid/17928 · Note
• http://securitytracker.com/id?1016050 · Note
• http://archives.neohapsis.com/archives/bugtraq/2006-05/0194.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2042 · Note