First published: Sun Nov 26 2006(Updated: )
SQL injection vulnerability in index1.asp in fipsGallery 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the which parameter.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Fipsasp Fipsgallery | <=1.5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2006-6117 has a medium severity rating due to its potential for harmful SQL injection attacks.
To fix CVE-2006-6117, update to fipsGallery version 1.6 or later which addresses the SQL injection vulnerability.
CVE-2006-6117 allows remote attackers to execute arbitrary SQL commands, potentially compromising database integrity.
CVE-2006-6117 affects fipsGallery version 1.5 and earlier.
Yes, CVE-2006-6117 can be exploited remotely by attackers via specially crafted requests.