CVE-2006-0522

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-02-02 · updated 2026-06-16

Description

SQL injection vulnerability in the Authentication Servlet in Symantec Sygate Management Server (SMS) version 4.1 build 1417 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via unknown attack vectors related to a URL.

Affected products

Symantec Sygate Management Server: through 4.1_mr_2_build_1417_english; 3.5_mr_3_build_894_english, 4.0_mr_1_build_1104_english, 4.1_ga_build_1258_japanese, 4.1_mr1_build_1351_chinese

References

http://secunia.com/advisories/18689
http://securityresponse.symantec.com/avcenter/security/Content/2006.02.01.html
http://securitytracker.com/id?1015561
http://www.osvdb.org/22883
http://www.securityfocus.com/bid/16452
http://www.vupen.com/english/advisories/2006/0402
https://exchange.xforce.ibmcloud.com/vulnerabilities/24413
http://secunia.com/advisories/18689
http://securityresponse.symantec.com/avcenter/security/Content/2006.02.01.html
http://securitytracker.com/id?1015561
http://www.osvdb.org/22883
http://www.securityfocus.com/bid/16452

Get alerted when CVE-2006-0522 or the next vulnerability affects your stack