CVE-2006-2126

Published: May 1, 2006Modified: Apr 16, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

SQL injection vulnerability in pocategories.php in MaxTrade 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) categori and (2) stranica parameters.

Affected (1)

Products: Avalon Ltd: Maxtrade

Avalon Ltd

1 product

Maxtrade

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Avalon Ltd Maxtrade	Version 1.0.1

References (12)

http://pridels0.blogspot.com/2006/04/maxtrade-sql-inj.html

Source: cve@mitre.org

http://secunia.com/advisories/19876

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/25122

Source: cve@mitre.org

http://www.securityfocus.com/bid/17765

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1581

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26171

Source: cve@mitre.org

http://pridels0.blogspot.com/2006/04/maxtrade-sql-inj.html