CVE-2006-6152

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-11-28 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in vSpin.net Classified System 2004 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to (a) cat.asp, or the (2) keyword, (3) order, (4) sort, (5) menuSelect, or (6) state parameter to (b) search.asp.

Affected products

Vspin.Net Classified System: 2004

References

http://s-a-p.ca/index.php?page=OurAdvisories&id=47
http://secunia.com/advisories/22987
http://securityreason.com/securityalert/1926
http://securitytracker.com/id?1017259
http://www.securityfocus.com/archive/1/452179/100/100/threaded
http://www.securityfocus.com/bid/21190
https://exchange.xforce.ibmcloud.com/vulnerabilities/30444
http://s-a-p.ca/index.php?page=OurAdvisories&id=47
http://secunia.com/advisories/22987
http://securityreason.com/securityalert/1926
http://securitytracker.com/id?1017259
http://www.securityfocus.com/archive/1/452179/100/100/threaded

Get alerted when CVE-2006-6152 or the next vulnerability affects your stack