Unscored CVE-2006-2985 EUVD-2006-2982GHSA-5hfv-r9xg-387j

SQL injection vulnerability in index.php in IntegraMOD 1.4.0 and earlier allows remote attackers to execute arbitrary SQL commands via doub…

Published Jun 13, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in index.php in IntegraMOD 1.4.0 and earlier allows remote attackers to execute arbitrary SQL commands via double-encoded "'" characters in the STYLE_URL parameter.

References

20060612 verified SQL injection in IntegraMOD 1.4.0 (source inspection) mailing-list
20060606 'Multiple Sql injection and XSS in integramod portal mailing-list
1085 third-party-advisory
integramod-index-sql-injection(27097) vdb-entry