Description (CNA)
Multiple SQL injection vulnerabilities in CyberBuild allow remote attackers to execute arbitrary SQL commands via the (1) SessionID parameter to login.asp or (2) ProductIndex parameter to browse0.htm.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.vupen.com/english/advisories/2006/1630
- http://www.osvdb.org/25195
- http://www.osvdb.org/25196
- http://pridels0.blogspot.com/2006/05/cyberbuild-vuln.html
- http://www.securityfocus.com/bid/17829
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26201
- http://secunia.com/advisories/19889
ADP enrichment
No English description supplied.