CVE-2006-6021

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-11-21 · updated 2026-06-16

Description

SQL injection vulnerability in the login component in BestWebApp Dating Site allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) passwd parameters.

Affected products

Bestwebapp Dating Site: all versions

References

http://secunia.com/advisories/23017
http://securityreason.com/securityalert/1898
http://www.securityfocus.com/archive/1/451963/100/0/threaded
http://www.securityfocus.com/archive/1/488647/100/100/threaded
http://www.securityfocus.com/bid/21158
https://exchange.xforce.ibmcloud.com/vulnerabilities/30394
http://secunia.com/advisories/23017
http://securityreason.com/securityalert/1898
http://www.securityfocus.com/archive/1/451963/100/0/threaded
http://www.securityfocus.com/archive/1/488647/100/100/threaded
http://www.securityfocus.com/bid/21158
https://exchange.xforce.ibmcloud.com/vulnerabilities/30394

Get alerted when CVE-2006-6021 or the next vulnerability affects your stack