CVE-2006-2179

Published: May 4, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in CyberBuild allow remote attackers to execute arbitrary SQL commands via the (1) SessionID parameter to login.asp or (2) ProductIndex parameter to browse0.htm.

Affected (1)

Products: Smartwin Technology: Cyberoffice Warehouse Builder

Smartwin Technology

1 product

Cyberoffice Warehouse Builder

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Smartwin Technology Cyberoffice Warehouse Builder	All versions

References (14)

http://pridels0.blogspot.com/2006/05/cyberbuild-vuln.html

Source: cve@mitre.org

http://secunia.com/advisories/19889

Source: cve@mitre.org

ExploitVendor Advisory

http://www.osvdb.org/25195

Source: cve@mitre.org

http://www.osvdb.org/25196

Source: cve@mitre.org

http://www.securityfocus.com/bid/17829

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1630

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26201

Source: cve@mitre.org

http://pridels0.blogspot.com/2006/05/cyberbuild-vuln.html