PT-2006-5319 · Digiappz · Digiappz Freekot

Farhadkey · Published 2006-09-01 · Updated 2018-10-17 · CVE-2006-4524

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Digiappz Freekot version 1.01

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the login or password parameters in the login verif.asp file.

Recommendations For Digiappz Freekot version 1.01, consider restricting access to the login verif.asp file until a patch is available. As a temporary workaround, avoid using the login and password parameters in the login process to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2006-4524

Affected Products

Digiappz Freekot

References · 10

• 🔥 https://exploit-db.com/exploits/10496 · Exploit
• 🔥 https://exploit-db.com/exploits/28443 · Exploit
• http://secunia.com/advisories/21669 · Vendor Advisory
• http://kapda.ir/advisory-410.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-4524 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28672 · Note
• http://securityreason.com/securityalert/1488 · Note
• http://securityfocus.com/archive/1/444752/100/0/threaded · Note
• http://securityfocus.com/bid/19768 · Note
• http://kapda.ir/attach-1996-xpl_freekot.htm · Note