Unscored severity · published Aug 31, 2006
CVE-2006-4463
SQL injection vulnerability in the administrator control panel in Jetstat.com JS ASP Faq Manager 1.10 allows remote attackers to execute arbitrary SQL commands via the pwd…
–
CVSS
1.4%
EPSS
No
On KEV
Description
SQL injection vulnerability in the administrator control panel in Jetstat.com JS ASP Faq Manager 1.10 allows remote attackers to execute arbitrary SQL commands via the pwd parameter (aka the Password field).
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JA
JS Asp Faq Manager · Jetstat.com
1.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-4463
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-4463
secunia.com
http://secunia.com/advisories/21674
securityreason.com
http://securityreason.com/securityalert/1483
www.osvdb.org
http://www.osvdb.org/28266
www.securityfocus.com
http://www.securityfocus.com/archive/1/444652/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/19761
www.vupen.com
http://www.vupen.com/english/advisories/2006/3415
More from JS Asp Faq Manager
–
CVE-2006-4590
SQL injection vulnerability in admin/default.asp in Jetstat.com JS ASP Faq Manager 1.10 and earlier allows remote attackers to execute arbitrary SQL commands via the uid…