CVE-2006-7034: SQL Injection
Published Feb 23, 2007
·Updated
SQL injection vulnerability in directory.php in Super Link Exchange Script 1.0 might allow remote attackers to execute arbitrary SQL queries via the cat parameter.
Affected Software
18 affected components
Apple iOS and macOS=10.4.9
HP HP-UX
HP Tru64=5.1b_pk2_bl22
IBM AIX
IBM Os2
Linux Linux kernel
Microsoft Windows 2000
Microsoft Windows 2003 Server=sp2
Microsoft Windows 95
Microsoft Windows 98=gold
Microsoft Windows 98SE
Microsoft Windows Me
Microsoft Windows NT=4.0
Microsoft Windows XP=gold
Santa Cruz Operation Sco Unix
Sun Solaris
Windriver Bsdos
Super Link Exchange Script Super Link Exchange Script=1.0
Event History
Feb 23, 2007
CVE Published
03:28 AM
Data Sourced
03:28 AM
DescriptionWeaknessAffected Software
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-7034?
CVE-2006-7034 is classified as a high severity SQL injection vulnerability.
2
How do I fix CVE-2006-7034?
To fix CVE-2006-7034, ensure that input parameters such as 'cat' are properly sanitized and use prepared statements for SQL queries.
3
Who is affected by CVE-2006-7034?
CVE-2006-7034 affects users of Super Link Exchange Script version 1.0.
4
Can CVE-2006-7034 allow for remote attacks?
Yes, CVE-2006-7034 can allow remote attackers to execute arbitrary SQL queries.
5
What software versions are vulnerable to CVE-2006-7034?
Only Super Link Exchange Script version 1.0 is identified as vulnerable to CVE-2006-7034.