cve/2006/CVE-2006-6846.md

CVE-2006-6846

Description

Multiple SQL injection vulnerabilities in While You Were Out (WYWO) InOut Board 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the num parameter in (a) phonemessage.asp, (2) the catcode parameter in (b) faqDsp.asp, and the (3) Username and (4) Password fields in (c) login.asp.

POC

Reference

• https://www.exploit-db.com/exploits/3032

Github

No PoCs found on GitHub currently.