CVE-2006-6524

EUVD-2006-6507 · Published Dec 14, 2006

SQL injection vulnerability in vdateUsr.asp in EzHRS HR Assist 1.05 and earlier allows remote attackers to execute arbitrary SQL commands via the Uname (UserName) parameter.

Technologies

Ezhrs Hr Assist

Weaknesses

NVD-CWE-Other

CVSS scores

v2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access

T1190Exploit Public-Facing Application

References

https://www.exploit-db.com/exploits/2909
http://secunia.com/advisories/23304
http://www.vupen.com/english/advisories/2006/4934
https://exchange.xforce.ibmcloud.com/vulnerabilities/30847

Potentially impacted assets

See if this affects your attack surface