CVE-2006-2296

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-05-10 · updated 2026-06-16

Description

SQL injection vulnerability in search_result.asp in EDirectoryPro 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the keyword parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.

Affected products

Keyvan1.Com Edirectorypro: through 2.0

References

http://downloads.securityfocus.com/vulnerabilities/exploits/edirectorypro-sql-inj.txt
http://secunia.com/advisories/20017
http://www.osvdb.org/25334
http://www.securityfocus.com/bid/17912
http://www.vupen.com/english/advisories/2006/1739
https://exchange.xforce.ibmcloud.com/vulnerabilities/26319
http://downloads.securityfocus.com/vulnerabilities/exploits/edirectorypro-sql-inj.txt
http://secunia.com/advisories/20017
http://www.osvdb.org/25334
http://www.securityfocus.com/bid/17912
http://www.vupen.com/english/advisories/2006/1739
https://exchange.xforce.ibmcloud.com/vulnerabilities/26319

Get alerted when CVE-2006-2296 or the next vulnerability affects your stack