Multiple SQL injection vulnerabilities in detail.asp in DuWare DuNews allow remote attackers to execute arbitrary SQL commands via the (1) iNews, (2) iType, or (3) Action parameter. NOTE: the iType parameter in type.asp is covered by CVE-2005-3976.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2006-12-07 01:28
Updated : 2026-06-16 22:32
NVD link : CVE-2006-6354
Mitre link : CVE-2006-6354
CVE.ORG link : CVE-2006-6354
JSON object : View
Products Affected
duware
- dupaypal_pro
- dupaypal
- duarticle
- dudirectory
- dugallery
- dudirectory_pro
- duamazon
- dudownload
- dudirectory_pro_sql
- dunews
- duclassified
CWE
