Unscored CVE-2006-6455 EUVD-2006-6438GHSA-m75j-pqvr-h6mm

Multiple SQL injection vulnerabilities in admin/default.asp in DUware DUdirectory 3.1, and possibly DUdirectory Pro and Pro SQL 3.x, allow …

Published Dec 10, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple SQL injection vulnerabilities in admin/default.asp in DUware DUdirectory 3.1, and possibly DUdirectory Pro and Pro SQL 3.x, allow remote attackers to execute arbitrary SQL commands via the (1) Username or (2) Password parameter. NOTE: some of these details are obtained from third party information.

References

ADV-2006-4908 vdb-entry
20061207 DUdirectory Admin Panel SQL Injection mailing-list
21485 vdb-entry
23275 third-party-advisory
2017 third-party-advisory
dudirectory-default-sql-injection(30783) vdb-entry