CVE-2006-5797

Description

Multiple SQL injection vulnerabilities in default.asp in Xenis.creator CMS allow remote attackers to execute arbitrary SQL commands via the (1) nav, (2) s, or (3) print parameters.

Affected Platforms

Weakness Type

NVD-CWE-Other

References

• http://marc.info/?l=bugtraq&m=116266150514762&w=2
• http://marc.info/?l=bugtraq&m=116267021732120&w=2
• http://secunia.com/advisories/22716
• http://securitytracker.com/id?1017162
• http://www.majorsecurity.de/index_2.php?major_rls=major_rls31
• http://www.securityfocus.com/bid/20908