CyberSec.Space Logo
Back to CVE Browser

CVE-2006-3292

HIGH
7.5
CVSS Severity Score
EPSS Score0.1380%
EPSS Percentile14.00th
PublishedJun 28, 2006
Last ModifiedApr 16, 2026

Vulnerability Description

SQL injection vulnerability in the Search gadget in Jaws 0.6.2 allows remote attackers to execute arbitrary SQL commands via queries with the "LIKE" keyword in the searchdata parameter (search field).

Affected Platforms (CPE)

📦
Jaws

Jaws

= 0.6.2

References & Advisories

🔗 http://retrogod.altervista.org/JAWS_062_sql.html
🔗 http://secunia.com/advisories/20842
🔗 http://securityreason.com/securityalert/1165
🔗 http://www.jaws-project.com/index.php?blog/show/29
🔗 http://www.securityfocus.com/archive/1/438434/100/0/threaded
🔗 http://www.securityfocus.com/bid/18665
🔗 http://www.vupen.com/english/advisories/2006/2546
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/27334

Related Vulnerabilities

CVE-2016-200169.8

MVPower CCTV DVR models, including TV-7104HE 1.8.4 115215B9 and TV7108HE, contain a web shell that is accessible via a /shell URI....

CVE-2004-24437.5

Jaws 0.3 allows remote attackers to bypass authentication and via an HTTP request to admin.php with the logged cookie set to the M...

CVE-2004-20677.5

SQL injection vulnerability in controlpanel.php in Jaws Framework and Content Management System 0.4 allows remote attackers to exe...

CVE-2019-253337.5

Bullwark Momentum Series JAWS 1.0 contains a directory traversal vulnerability that allows unauthenticated attackers to access sys...