Unscored CVE-2006-4347 EUVD-2006-4335GHSA-fg6h-6867-7xrg

SQL injection vulnerability in user logon authentication request handling in Cool_CoolD.exe in Cool Manager 5.0 (5,60,90,28) and Cool Messe…

Published Aug 24, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in user logon authentication request handling in Cool_CoolD.exe in Cool Manager 5.0 (5,60,90,28) and Cool Messenger Office/School Server 5.5 (5,65,12,13) allows remote attackers to execute arbitrary SQL commands via the username field.

References

20060822 [vuln.sg] Cool Messenger Server SQL Injection Vulnerability mailing-list
19669 vdb-entry
21569 third-party-advisory
28117 vdb-entry
ADV-2006-3362 vdb-entry
http://vuln.sg/coolmessenger55-en.html
cool-cool-sql-injection(28531) vdb-entry