CVE-2006-3267

Published: Jun 27, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in index.php in Infinite Core Technologies (ICT) 1.0 Gold and earlier allows remote attackers to execute arbitrary SQL commands via the post parameter.

Affected (1)

Products: Infinite Core Technologies: Ict

Infinite Core Technologies

1 product

Ict

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Infinite Core Technologies Ict	version ≤ 1.0_gold

References (10)

http://pridels0.blogspot.com/2006/06/ict-infinite-core-technologies-vuln.html

Source: cve@mitre.org

http://secunia.com/advisories/20806

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/18644

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/2517

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/27360

Source: cve@mitre.org

http://pridels0.blogspot.com/2006/06/ict-infinite-core-technologies-vuln.html