CVE-2006-5707
UnknownEPSS 2.08%
Last modified
CVE-2006-5707 is a vulnerability of currently unknown severity. SQL injection vulnerability in index.php in PHPEasyData Pro 1.4.1 and 2.2.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter.. EPSS estimates a 2.08% chance of exploitation in the next 30 days.
Description
SQL injection vulnerability in index.php in PHPEasyData Pro 1.4.1 and 2.2.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Phpeasydata Pro | Phpeasydata Pro | 1.4.1 |
| Phpeasydata Pro | Phpeasydata Pro | 2.2.1 |
References
- http://secunia.com/advisories/22616Vendor Advisory
- http://secunia.com/advisories/22616Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-5707?
SQL injection vulnerability in index.php in PHPEasyData Pro 1.4.1 and 2.2.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter.
How severe is CVE-2006-5707?
Severity scoring for CVE-2006-5707 is pending analysis. The EPSS model estimates a 2.08% probability of exploitation in the next 30 days.
How do I fix CVE-2006-5707?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2006
- CVE-2006-5701Double free vulnerability in squashfs module in the Linux ke…
- CVE-2006-5702Tikiwiki 1.9.5 allows remote attackers to obtain sensitive i…
- CVE-2006-5703Cross-site scripting (XSS) vulnerability in tiki-featured_li…
- CVE-2006-5704HP NonStop Server G06.29, when running Standard Security T65…
- CVE-2006-5705Multiple directory traversal vulnerabilities in plugins/wp-d…
- CVE-2006-5706Unspecified vulnerabilities in PHP, probably before 5.2.0, a…
- CVE-2006-5708Multiple unspecified vulnerabilities in MDaemon and WorldCli…7.5
- CVE-2006-5709Unspecified vulnerability in WorldClient in Alt-N Technologi…
- CVE-2006-5710The Airport driver for certain Orinoco based Airport cards i…
- CVE-2006-5711ECI Telecom B-FOCuS Wireless 802.11b/g ADSL2+ Router allows …
- CVE-2006-5712Cross-site scripting (XSS) vulnerability in Mirapoint WebMai…
- CVE-2006-5713Cross-site scripting (XSS) vulnerability in Easy File Sharin…
Are you affected by CVE-2006-5707?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST