CVE-2006-4463

Published: Aug 31, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in the administrator control panel in Jetstat.com JS ASP Faq Manager 1.10 allows remote attackers to execute arbitrary SQL commands via the pwd parameter (aka the Password field).

Affected (1)

Products: Jetstat.com: Js Asp Faq Manager

Jetstat.com

1 product

Js Asp Faq Manager

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Jetstat.com Js Asp Faq Manager	Version 1.10

References (14)

http://secunia.com/advisories/21674

Source: cve@mitre.org

http://securityreason.com/securityalert/1483

Source: cve@mitre.org

http://www.osvdb.org/28266

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/444652/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/19761

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/3415

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/28638

Source: cve@mitre.org

http://secunia.com/advisories/21674