PT-2006-6848 · Dev4U · Dev4U Cms

Published 2006-12-01 · Updated 2018-10-17 · CVE-2006-6218

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions dev4u CMS (affected versions not specified)

Description The issue concerns multiple SQL injection vulnerabilities in the index.php file of dev4u CMS. These vulnerabilities allow remote attackers to execute arbitrary SQL commands by manipulating specific parameters. The vulnerable parameters include seite id, gruppe id.php, and go target.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2006-6218

Affected Products

Dev4U Cms

References · 5

• 🔥 http://majorsecurity.de/index_2.php?major_rls=major_rls36 · Exploit
• 🔥 http://securityfocus.com/bid/21170 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-6218 · Security Note
• http://securityfocus.com/archive/1/452008/100/200/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30395 · Note