CVE-2006-3027

ALTO 7.5CVE-2006-3027 · Published 15/06/2006 · updated 16/06/2026

In breve

CVE-2006-3027 è una vulnerabilità ALTO (CVSS 7.5) che riguarda ephotos (enthrallweb).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.7%, superiore al 85.9% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
ephotos enthrallweb	`≤ 2.2`	No fix yet

Description

Multiple SQL injection vulnerabilities in Enthrallwebe ePhotos 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) CAT_ID parameter in (a) subphotos.asp and (b) subLevel2.asp, the (2) AL_ID parameter in (c) photo.asp, and the (3) SUB_ID parameter in (d) subLevel2.asp.

References

pridels0.blogspot.com/2006/06/ephotos-vuln.html
secunia.com/advisories/20609 · Vendor Advisory
secunia.com/advisories/23525 · Exploit
osvdb.org/26365
osvdb.org/26366
osvdb.org/26367
securityfocus.com/bid/21742 · Exploit
vupen.com/english/advisories/2006/2316
vupen.com/english/advisories/2006/5160
exchange.xforce.ibmcloud.com/vulnerabilities/27035
exploit-db.com/exploits/2986

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free