CVE-2006-6450

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 21.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-12-10 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in dagent/downloadreport.asp in Novell ZENworks Patch Management (ZPM) before 6.3.2.700 allow remote attackers to execute arbitrary SQL commands via the (1) agentid and (2) pass parameters.

Affected products

Novell Zenworks Patch Management Server: 6.3.2.700

References

http://secunia.com/advisories/23243
http://www.securityfocus.com/bid/21473
http://www.vupen.com/english/advisories/2006/4864
https://exchange.xforce.ibmcloud.com/vulnerabilities/30768
https://secure-support.novell.com/KanisaPlatform/Publishing/298/3506963_f.SAL_Public.html
http://secunia.com/advisories/23243
http://www.securityfocus.com/bid/21473
http://www.vupen.com/english/advisories/2006/4864
https://exchange.xforce.ibmcloud.com/vulnerabilities/30768
https://secure-support.novell.com/KanisaPlatform/Publishing/298/3506963_f.SAL_Public.html

Get alerted when CVE-2006-6450 or the next vulnerability affects your stack