← Database

CVE-2006-6450

HIGH CVSS: 7.5 Published: 2006-12-10 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in dagent/downloadreport.asp in Novell ZENworks Patch Management (ZPM) before 6.3.2.700 allow remote attackers to execute arbitrary SQL commands via the (1) agentid and (2) pass parameters.

Affected Platforms

Novell Zenworks Patch Management Server

Weakness Type

NVD-CWE-Other

References