CVE-2006-6387

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-12-08 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in LINK Content Management Server (CMS) allow remote attackers to execute arbitrary SQL commands via the (1) IDMeniGlavni parameter to navigacija.php, and the (2) IDStranicaPodaci parameter to prikazInformacije.php. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

Link Content Management Server: all versions

References

http://secunia.com/advisories/23107
http://www.securityfocus.com/bid/21464
https://exchange.xforce.ibmcloud.com/vulnerabilities/30744
http://secunia.com/advisories/23107
http://www.securityfocus.com/bid/21464
https://exchange.xforce.ibmcloud.com/vulnerabilities/30744

Get alerted when CVE-2006-6387 or the next vulnerability affects your stack