CVE-2006-2042: SQL Injection
First published: Tue May 09 2006(Updated: )
Adobe Dreamweaver 8 before 8.0.2 and MX 2004 can generate code that allows SQL injection attacks in the (1) ColdFusion, (2) PHP mySQL, (3) ASP, (4) ASP.NET, and (5) JSP server models.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Dreamweaver | =7.0 | |
| Adobe Dreamweaver | =8.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.adobe.com/support/security/bulletins/apsb06-07.html
- http://archives.neohapsis.com/archives/bugtraq/2006-05/0194.html
- http://www.securityfocus.com/bid/17928
- http://www.osvdb.org/25361
- http://securitytracker.com/id?1016050
- http://secunia.com/advisories/20054
- http://www.vupen.com/english/advisories/2006/1753
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26339
Frequently Asked Questions
What is the severity of CVE-2006-2042?
The severity of CVE-2006-2042 is considered high due to the potential for SQL injection attacks.
How do I fix CVE-2006-2042?
Fixing CVE-2006-2042 involves upgrading to Adobe Dreamweaver version 8.0.2 or later.
Which versions of Adobe Dreamweaver are affected by CVE-2006-2042?
CVE-2006-2042 affects Adobe Dreamweaver 8 before 8.0.2 and MX 2004.
What types of attacks are possible due to CVE-2006-2042?
CVE-2006-2042 can allow for SQL injection attacks across multiple server models including ColdFusion, PHP mySQL, ASP, ASP.NET, and JSP.
Can I still use affected versions of Adobe Dreamweaver safe from CVE-2006-2042?
Using affected versions of Adobe Dreamweaver poses significant security risks and it is recommended to upgrade to a patched version.
- collector/nvd-historical
- vendor/adobe
- product/dreamweaver
- canonical/adobe dreamweaver
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/severity
- agent/author
- agent/weakness
- agent/last-modified-date
- agent/first-publish-date
- agent/tags
- agent/event
- agent/description
- agent/source
- version/adobe dreamweaver/7.0
- version/adobe dreamweaver/8.0