← Database

CVE-2006-4347

HIGH CVSS: 7.5 Published: 2006-08-24 Modified: 2026-06-16

Description

SQL injection vulnerability in user logon authentication request handling in Cool_CoolD.exe in Cool Manager 5.0 (5,60,90,28) and Cool Messenger Office/School Server 5.5 (5,65,12,13) allows remote attackers to execute arbitrary SQL commands via the username field.

Affected Platforms

Jiran Cool ManagerJiran Cool Messenger Office School Server

Weakness Type

NVD-CWE-Other

References