← Database

CVE-2006-6846

HIGH CVSS: 7.5 Published: 2006-12-31 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in While You Were Out (WYWO) InOut Board 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the num parameter in (a) phonemessage.asp, (2) the catcode parameter in (b) faqDsp.asp, and the (3) Username and (4) Password fields in (c) login.asp.

Affected Platforms

Cybercoded While You Were Out Inout Board

Weakness Type

NVD-CWE-Other

References