CVE-2006-0728: SQL Injection
Published Feb 16, 2006
·Updated
SQL injection vulnerability in search.php in webSPELL 4.01.00 and earlier allows remote attackers to inject arbitrary SQL commands via the titleop parameter.
Affected Software
1 affected component
webSPELL Webspell<=4.01.00
Remediation
Patch Available
Event History
Feb 16, 2006
CVE Published
11:02 AM
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-0728?
CVE-2006-0728 has a medium severity level due to its potential for SQL injection attacks.
2
How do I fix CVE-2006-0728?
To fix CVE-2006-0728, update webSPELL to the latest version beyond 4.01.00 which addresses this vulnerability.
3
What software is affected by CVE-2006-0728?
CVE-2006-0728 affects webSPELL versions 4.01.00 and earlier.
4
Can CVE-2006-0728 lead to unauthorized access?
Yes, CVE-2006-0728 can allow attackers to execute arbitrary SQL commands, potentially leading to unauthorized access.
5
Are there known exploits for CVE-2006-0728?
Yes, there are known exploits that demonstrate SQL injection through the title_op parameter in affected versions of webSPELL.