Security Advisory

CVE-2006-6365

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2006-12-07 11:00:00

Last updated 2024-08-07 20:26:46

Assigner mitre

State PUBLISHED

Description

SQL injection vulnerability in detail.asp in DUware DUpaypal 3.1, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the iType parameter. NOTE: the iState parameter is already covered by CVE-2005-3976 and the iPro parameter is already covered by CVE-2005-2047.

← Browse all CVEs View on cve.org ↗