First published: Sun Nov 26 2006(Updated: )
SQL injection vulnerability in default2.asp in fipsForum 2.6 and earlier allows remote attackers to execute arbitrary SQL commands via the kat parameter.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Fipsasp Fipsforum | <=2.6 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2006-6116 is considered a high-severity vulnerability due to its potential for remote exploitation.
To fix CVE-2006-6116, upgrade to a version of fipsForum later than 2.6 that does not contain the SQL injection vulnerability.
CVE-2006-6116 is an SQL injection vulnerability that allows attackers to execute arbitrary SQL commands.
CVE-2006-6116 affects fipsForum version 2.6 and earlier.
Attackers can exploit CVE-2006-6116 by manipulating the kat parameter in default2.asp to execute unauthorized SQL commands.