CVE-2006-4463

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-08-31 · updated 2026-06-16

Description

SQL injection vulnerability in the administrator control panel in Jetstat.com JS ASP Faq Manager 1.10 allows remote attackers to execute arbitrary SQL commands via the pwd parameter (aka the Password field).

Affected products

Jetstat.Com Js Asp Faq Manager: 1.10

References

http://secunia.com/advisories/21674
http://securityreason.com/securityalert/1483
http://www.osvdb.org/28266
http://www.securityfocus.com/archive/1/444652/100/0/threaded
http://www.securityfocus.com/bid/19761
http://www.vupen.com/english/advisories/2006/3415
https://exchange.xforce.ibmcloud.com/vulnerabilities/28638
http://secunia.com/advisories/21674
http://securityreason.com/securityalert/1483
http://www.osvdb.org/28266
http://www.securityfocus.com/archive/1/444652/100/0/threaded
http://www.securityfocus.com/bid/19761

Get alerted when CVE-2006-4463 or the next vulnerability affects your stack