PT-2006-5263 · Js Asp · Js Asp Faq Manager

S3Rv3R_Hack3R · Published 2006-08-31 · Updated 2018-10-17 · CVE-2006-4463

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions JS ASP Faq Manager version 1.10

Description A SQL injection issue exists in the administrator control panel, allowing remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the pwd parameter, also known as the Password field.

Recommendations For JS ASP Faq Manager version 1.10, avoid using the pwd parameter in the administrator control panel until a fix is available. Consider restricting access to the control panel to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2006-4463

Affected Products

Js Asp Faq Manager

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2006-4463 · Security Note
• http://securityfocus.com/bid/19761 · Note
• http://vupen.com/english/advisories/2006/3415 · Note
• http://securityfocus.com/archive/1/444652/100/0/threaded · Note
• http://secunia.com/advisories/21674 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28638 · Note
• http://osvdb.org/28266 · Note
• http://securityreason.com/securityalert/1483 · Note