CVE-2006-2300

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-05-11 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in EImagePro allow remote attackers to execute arbitrary SQL commands via the (1) CatID parameter to subList.asp, (2) SubjectID parameter to imageList.asp, or (3) Pic parameter to view.asp.

Affected products

Keyvan1 Eimagepro: all versions

References

http://downloads.securityfocus.com/vulnerabilities/exploits/eimagepro-xss.txt
http://secunia.com/advisories/20043
http://www.osvdb.org/25331
http://www.osvdb.org/25332
http://www.osvdb.org/25333
http://www.securityfocus.com/bid/17911
http://www.vupen.com/english/advisories/2006/1749
https://exchange.xforce.ibmcloud.com/vulnerabilities/26343
http://downloads.securityfocus.com/vulnerabilities/exploits/eimagepro-xss.txt
http://secunia.com/advisories/20043
http://www.osvdb.org/25331
http://www.osvdb.org/25332

Get alerted when CVE-2006-2300 or the next vulnerability affects your stack