CVE-2006-2042

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-05-09 · updated 2026-06-16

Description

Adobe Dreamweaver 8 before 8.0.2 and MX 2004 can generate code that allows SQL injection attacks in the (1) ColdFusion, (2) PHP mySQL, (3) ASP, (4) ASP.NET, and (5) JSP server models.

Affected products

Adobe Dreamweaver Desktop: 7.0, 8.0

References

http://archives.neohapsis.com/archives/bugtraq/2006-05/0194.html
http://secunia.com/advisories/20054
http://securitytracker.com/id?1016050
http://www.adobe.com/support/security/bulletins/apsb06-07.html
http://www.osvdb.org/25361
http://www.securityfocus.com/bid/17928
http://www.vupen.com/english/advisories/2006/1753
https://exchange.xforce.ibmcloud.com/vulnerabilities/26339
http://archives.neohapsis.com/archives/bugtraq/2006-05/0194.html
http://secunia.com/advisories/20054
http://securitytracker.com/id?1016050
http://www.adobe.com/support/security/bulletins/apsb06-07.html

Get alerted when CVE-2006-2042 or the next vulnerability affects your stack