CVE-2006-6177

SQL injection vulnerability in system/core/users/users.profile.inc.php in Neocrome Seditio 1.10 and earlier allows remote authenticated users to execute…

published November 30, 2006

CVSS
—
EPSS
2%
Percentile
76.2
In the wild
Unconfirmed
What it is

SQL injection vulnerability in system/core/users/users.profile.inc.php in Neocrome Seditio 1.10 and earlier allows remote authenticated users to execute arbitrary SQL commands via a double-url-encoded id parameter to users.php that begins with a valid filename, as demonstrated by "default.gif" followed by an encoded NULL and ' (apostrophe) (%2500%2527).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01643 · 76.2th percentile
Published
2006-11-30T16:00Z
EPSS history
Timeline
  • 30 NOV 16:00Z
    SQL injection vulnerability in system/core/users/users.profile.inc.php in Neocrome Seditio 1.10 and earlier allows remote authenticated users to execute…
    cvelistv5