CVE-2006-4892

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-09-19 · updated 2026-06-16

Description

SQL injection vulnerability in faqview.asp in Techno Dreams FAQ Manager Package 1.0 allows remote attackers to execute arbitrary SQL commands via the key parameter.

Affected products

Techno Dreams Faq Manager Package: 1.0

References

http://secunia.com/advisories/21977
http://securityreason.com/securityalert/1615
http://www.securityfocus.com/archive/1/446259/100/0/threaded
http://www.securityfocus.com/bid/20074
http://www.vupen.com/english/advisories/2006/3681
https://exchange.xforce.ibmcloud.com/vulnerabilities/28976
https://www.exploit-db.com/exploits/2385
http://secunia.com/advisories/21977
http://securityreason.com/securityalert/1615
http://www.securityfocus.com/archive/1/446259/100/0/threaded
http://www.securityfocus.com/bid/20074
http://www.vupen.com/english/advisories/2006/3681

Get alerted when CVE-2006-4892 or the next vulnerability affects your stack