SQL Injection Vulnerability in GeoNetwork Opensource by OpenGeo
CVE-2006-5513

Currently unrated

Key Information:

Vendor

Geonetwork

Status
Opensource
Vendor
CVE Published:
26 October 2006

What is CVE-2006-5513?

GeoNetwork opensource prior to version 2.0.3 is susceptible to an SQL injection flaw that enables remote attackers to execute arbitrary SQL commands. This vulnerability can lead to unauthorized access and manipulation of the database through unspecified attack vectors, resulting in potential data leaks and security breaches.

References

http://secunia.com/advisories/22502
third-party-advisoryx_refsource_SECUNIA
http://sourceforge.net/project/shownotes.php?release_id=4...
x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2006/4151
vdb-entryx_refsource_VUPEN

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.