CVE-2006-5450

Published: Oct 23, 2006Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in index.asp in Kinesis Interactive Cinema System (KICS) CMS allows remote attackers to execute arbitrary SQL commands via the (1) txtUsername (user) or (2) txtPassword (pass) parameters.

Affected (1)

Products: Kinesis: Kinesis Interactive Cinema System

Kinesis

1 product

Kinesis Interactive Cinema System

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Kinesis Kinesis Interactive Cinema System	All versions

References (14)

http://secunia.com/advisories/22493

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/1757

Source: cve@mitre.org

http://www.osvdb.org/29901

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/449227/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/20607

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2006/4130

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/29683

Source: cve@mitre.org

http://secunia.com/advisories/22493