Unscored severity · published Sep 6, 2006
CVE-2006-4590
SQL injection vulnerability in admin/default.asp in Jetstat.com JS ASP Faq Manager 1.10 and earlier allows remote attackers to execute arbitrary SQL commands via the uid…
–
CVSS
1.3%
EPSS
No
On KEV
Description
SQL injection vulnerability in admin/default.asp in Jetstat.com JS ASP Faq Manager 1.10 and earlier allows remote attackers to execute arbitrary SQL commands via the uid parameter, a different vector than CVE-2006-4463. NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JA
JS Asp Faq Manager · Jetstat.com
through 1.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-4590
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-4590
Vendor Advisory
http://secunia.com/advisories/21674
Exploit
http://www.osvdb.org/28266
www.securityfocus.com
http://www.securityfocus.com/bid/19761
www.vupen.com
http://www.vupen.com/english/advisories/2006/3415
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/28638
More from JS Asp Faq Manager
–
CVE-2006-4463
SQL injection vulnerability in the administrator control panel in Jetstat.com JS ASP Faq Manager 1.10 allows remote attackers to execute arbitrary SQL commands via the pwd…