CVE Vulnerabilities

CVE-2006-5723

Published: Nov 04, 2006 | Modified: Apr 09, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

SQL injection vulnerability in DataparkSearch Engine 4.42 and earlier allows remote attackers to execute arbitrary SQL commands via a malformed hostname in a URL.

Affected Software

NameVendorStart VersionEnd Version
DataparksearchDataparksearch4.16 (including)4.16 (including)
DataparksearchDataparksearch4.17 (including)4.17 (including)
DataparksearchDataparksearch4.18 (including)4.18 (including)
DataparksearchDataparksearch4.19 (including)4.19 (including)
DataparksearchDataparksearch4.20 (including)4.20 (including)
DataparksearchDataparksearch4.21 (including)4.21 (including)
DataparksearchDataparksearch4.22 (including)4.22 (including)
DataparksearchDataparksearch4.23 (including)4.23 (including)
DataparksearchDataparksearch4.24 (including)4.24 (including)
DataparksearchDataparksearch4.25 (including)4.25 (including)
DataparksearchDataparksearch4.26 (including)4.26 (including)
DataparksearchDataparksearch4.27 (including)4.27 (including)
DataparksearchDataparksearch4.28 (including)4.28 (including)
DataparksearchDataparksearch4.29 (including)4.29 (including)
DataparksearchDataparksearch4.30 (including)4.30 (including)
DataparksearchDataparksearch4.31 (including)4.31 (including)
DataparksearchDataparksearch4.32 (including)4.32 (including)
DataparksearchDataparksearch4.33 (including)4.33 (including)
DataparksearchDataparksearch4.34 (including)4.34 (including)
DataparksearchDataparksearch4.35 (including)4.35 (including)
DataparksearchDataparksearch4.36 (including)4.36 (including)
DataparksearchDataparksearch4.37 (including)4.37 (including)
DataparksearchDataparksearch4.42 (including)4.42 (including)

References