Unscored CVE-2006-5285 EUVD-2006-5270GHSA-2q2q-7pmr-fgp2

SQL injection vulnerability in index.php in XeoPort 0.81, and possibly earlier, allows remote attackers to execute arbitrary SQL commands v…

Published Oct 13, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in index.php in XeoPort 0.81, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the xp_body_text parameter.

References

20475 vdb-entry
1017055 vdb-entry
1735 third-party-advisory
20061012 XeoPort <= 0.81 SQL Injection Vulnerability mailing-list
20061012 XeoPort <= 0.81 SQL Injection Vulnerability mailing-list
xeoport-index-sql-injection(29479) vdb-entry