Unscored CVE-2006-6486 EUVD-2006-6469GHSA-rr99-rr39-c7qv

SQL injection vulnerability in EasyPage allows remote attackers to execute arbitrary SQL commands via unspecified vectors in sptrees/defaul…

Published Dec 12, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in EasyPage allows remote attackers to execute arbitrary SQL commands via unspecified vectors in sptrees/default.aspx, possibly involving the docId parameter. NOTE: this issue appears to have been disputed by a third party researcher, stating that SQL injection is not possible. However, insufficient details were provided to evaluate the dispute.

References

easypageportal-unspecified-sql-injection(30755) vdb-entry
20061205 EasyPage Portal ( all ver )SQL Injection mailing-list
20061205 Re: EasyPage Portal ( all ver )SQL Injection mailing-list