CVE-2006-1947

Published: Apr 20, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in plexum.php in NicPlex Plexum X5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) pagesize, (2) maxrec, and (3) startpos parameters.

Affected (1)

Products: Nicplex: Plexum

Nicplex

1 product

Plexum

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Nicplex Plexum	Up to x5

References (10)

http://pridels0.blogspot.com/2006/04/plexum-x5-sql-vuln.html

Source: cve@mitre.org

http://secunia.com/advisories/19720

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/17617

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2006/1423

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/25918

Source: cve@mitre.org

http://pridels0.blogspot.com/2006/04/plexum-x5-sql-vuln.html