← Database

CVE-2006-2499

HIGH CVSS: 7.5 Published: 2006-05-20 Modified: 2026-06-16

Description

SQL injection vulnerability in default.asp in CodeAvalanche News (CANews) 1.2 allows remote attackers to execute arbitrary SQL commands via the password field.

Affected Platforms

Xfairguy Codeavalanche News

Weakness Type

NVD-CWE-Other

References