CVE-2006-2300

N/A Unknown

Published: May 11, 2006 Modified: April 16, 2026

Description

Multiple SQL injection vulnerabilities in EImagePro allow remote attackers to execute arbitrary SQL commands via the (1) CatID parameter to subList.asp, (2) SubjectID parameter to imageList.asp, or (3) Pic parameter to view.asp.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://downloads.securityfocus.com/vulnerabilities/exploits/eimagepro-xss.txt

Source: cve@mitre.org

Exploit

http://secunia.com/advisories/20043

Source: cve@mitre.org

Exploit Vendor Advisory

http://www.osvdb.org/25331

Source: cve@mitre.org

http://www.osvdb.org/25332

Source: cve@mitre.org

http://www.osvdb.org/25333

Source: cve@mitre.org

http://www.securityfocus.com/bid/17911

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2006/1749

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26343

Source: cve@mitre.org

http://downloads.securityfocus.com/vulnerabilities/exploits/eimagepro-xss.txt