CVE-2006-1571

Severity: medium (CVSS 5.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-04-01 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in loginprocess.php in qliteNews 2005.07.01 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters.

Affected products

R2Xdesign Qlitenews: 2005-07-01

References

http://evuln.com/vulns/114/summary.html
http://secunia.com/advisories/19476
http://securityreason.com/securityalert/701
http://www.osvdb.org/24301
http://www.securityfocus.com/archive/1/430873/100/0/threaded
http://www.securityfocus.com/bid/17333
http://www.vupen.com/english/advisories/2006/1182
https://exchange.xforce.ibmcloud.com/vulnerabilities/25565
http://evuln.com/vulns/114/summary.html
http://secunia.com/advisories/19476
http://securityreason.com/securityalert/701
http://www.osvdb.org/24301

Get alerted when CVE-2006-1571 or the next vulnerability affects your stack