CVE-2006-5723

Published: Nov 4, 2006Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in DataparkSearch Engine 4.42 and earlier allows remote attackers to execute arbitrary SQL commands via a malformed hostname in a URL.

Affected (23)

Products: Dataparksearch: Dataparksearch

Dataparksearch

1 product

Dataparksearch

Configuration A

23 vulnerable

Vulnerable Software	Affected Versions
Dataparksearch Dataparksearch	Version 4.16
Dataparksearch Dataparksearch	Version 4.17
Dataparksearch Dataparksearch	Version 4.18
Dataparksearch Dataparksearch	Version 4.19
Dataparksearch Dataparksearch	Version 4.20
Dataparksearch Dataparksearch	Version 4.21
Dataparksearch Dataparksearch	Version 4.22
Dataparksearch Dataparksearch	Version 4.23
Dataparksearch Dataparksearch	Version 4.24
Dataparksearch Dataparksearch	Version 4.25
Dataparksearch Dataparksearch	Version 4.26
Dataparksearch Dataparksearch	Version 4.27
Dataparksearch Dataparksearch	Version 4.28
Dataparksearch Dataparksearch	Version 4.29
Dataparksearch Dataparksearch	Version 4.30
Dataparksearch Dataparksearch	Version 4.31
Dataparksearch Dataparksearch	Version 4.32
Dataparksearch Dataparksearch	Version 4.33
Dataparksearch Dataparksearch	Version 4.34
Dataparksearch Dataparksearch	Version 4.35
Dataparksearch Dataparksearch	Version 4.36
Dataparksearch Dataparksearch	Version 4.37
Dataparksearch Dataparksearch	Version 4.42