Back to CVE Browser

CVE-2006-4497

HIGH

7.5

CVSS Severity Score

EPSS Score0.1690%

EPSS Percentile12.26th

PublishedAug 31, 2006

Last ModifiedApr 16, 2026

Vulnerability Description

SQL injection vulnerability in comments.php in IwebNegar 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected Platforms (CPE)

📦

Iwebnegar

Iwebnegar

= 1.1

References & Advisories

🔗 http://securityreason.com/securityalert/1480

🔗 http://www.securityfocus.com/archive/1/444744/100/0/threaded

🔗 http://www.securityfocus.com/bid/19757

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/28665

🔗 http://securityreason.com/securityalert/1480

🔗 http://www.securityfocus.com/archive/1/444744/100/0/threaded

🔗 http://www.securityfocus.com/bid/19757

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/28665

Related Vulnerabilities

CVE-2004-140210.0

SQL injection vulnerability in iWebNegar allows remote attackers to execute arbitrary SQL commands via (1) the string parameter fo...

CVE-2006-44964.3

Cross-site scripting (XSS) vulnerability in comments.php in IwebNegar 1.1 allows remote attackers to inject arbitrary web script o...

CVE-2006-446110.0

Paessler IPCheck Server Monitor before 5.3.3.639/640 does not properly implement a "list of acceptable host IP addresses in the pr...

CVE-2006-502510.0

Multiple unspecified vulnerabilities in Paisterist Simple HTTP Scanner (sHTTPScanner) before 0.2 have unknown impact and attack ve...