CVE-2006-2889: SQL Injection
Multiple SQL injection vulnerabilities in index.php in Pixelpost 1-5rc1-2 and earlier allow remote attackers to execute arbitrary SQL commands, and leverage them to gain administrator privileges, via the (1) category or (2) archivedate parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-2889?
CVE-2006-2889 is classified as a high severity vulnerability due to its potential to allow remote attackers to execute arbitrary SQL commands.
How do I fix CVE-2006-2889?
To fix CVE-2006-2889, you should upgrade to Pixelpost version 1.5_rc2 or later, which addresses these SQL injection vulnerabilities.
What type of vulnerabilities are present in CVE-2006-2889?
CVE-2006-2889 contains multiple SQL injection vulnerabilities in the index.php file.
What parameters are exploited in CVE-2006-2889?
The vulnerabilities in CVE-2006-2889 can be exploited through the 'category' and 'archivedate' parameters.
Can CVE-2006-2889 allow attackers to gain administrator privileges?
Yes, CVE-2006-2889 can be exploited by attackers to gain administrator privileges on vulnerable systems.