Unscored severity · published Mar 6, 2006
CVE-2006-1001
SQL injection vulnerability in the board module in LanSuite LanParty Intranet System 2.0.6 and 2.1.0 beta allows remote attackers to execute arbitrary SQL commands via the fid…
–
CVSS
1.4%
EPSS
No
On KEV
Description
SQL injection vulnerability in the board module in LanSuite LanParty Intranet System 2.0.6 and 2.1.0 beta allows remote attackers to execute arbitrary SQL commands via the fid parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Lanparty Intranet System · Lansuite
2.0.6; 2.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-1001
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-1001
Vendor Advisory
http://secunia.com/advisories/19048
www.osvdb.org
http://www.osvdb.org/23533
Exploit
http://www.securityfocus.com/bid/16836
www.vupen.com
http://www.vupen.com/english/advisories/2006/0747
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/24940
www.exploit-db.com
https://www.exploit-db.com/exploits/1526