← Database

CVE-2006-2954

HIGH CVSS: 7.5 Published: 2006-06-12 Modified: 2026-06-16

Description

SQL injection vulnerability in files.asp in OfficeFlow 2.6 and earlier allows remote attackers to execute arbitrary SQL commands via the Project parameter.

Affected Platforms

Primoris Software Officeflow

Weakness Type

NVD-CWE-Other

References