SQL Injection Vulnerabilities in LINK Content Management Server
CVE-2006-6387

Currently unrated

Key Information:

Vendor: Link Content Management Server
Status: Link Content Management Server
Vendor: CVE Published:; 8 December 2006

🔔 Create Link Content Management Server Vulnerability Alert

What is CVE-2006-6387?

LINK Content Management Server has multiple SQL injection vulnerabilities that could be exploited by remote attackers. These vulnerabilities reside in the input parameters of specific PHP files, allowing execution of arbitrary SQL commands. An attacker can manipulate the 'IDMeniGlavni' parameter in navigacija.php and the 'IDStranicaPodaci' parameter in prikazInformacije.php, raising significant security concerns for users of this content management system.

References

http://www.securityfocus.com/bid/21464

vdb-entryx_refsource_BID

http://secunia.com/advisories/23107

third-party-advisoryx_refsource_SECUNIA

https://exchange.xforce.ibmcloud.com/vulnerabilities/30744

vdb-entryx_refsource_XF

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Dec 8, 2006
Vulnerability Reserved
Dec 7, 2006

CVE-2006-6387 Data

JSON