CVE-2006-6367 Information

Description

Multiple SQL injection vulnerabilities in detail.asp in DUware DUdownload 1.1 and possibly earlier allow remote attackers to execute arbitrary SQL commands via the (1) iFile or (2) action parameter. NOTE: the iType parameter is already covered by CVE-2005-3976.

Reference

http://marc.info/?l=bugtraq&m=116508632603388&w=2 http://secunia.com/advisories/23224 http://www.aria-security.com/forum/showthread.php?t=60 http://www.securityfocus.com/bid/21405 http://www.vupen.com/english/advisories/2006/4845 https://exchange.xforce.ibmcloud.com/vulnerabilities/30669