CVE-2006-6181

Published: Dec 1, 2006Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in default.asp in ClickTech ClickContact allow remote attackers to execute arbitrary SQL commands via the (1) AlphaSort, (2) In, and (3) orderby parameters.

Affected (1)

Products: Clicktech: Clickcontact

Clicktech

1 product

Clickcontact

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Clicktech Clickcontact	All versions

References (12)

http://secunia.com/advisories/23119

Source: cve@mitre.org

Vendor Advisory

http://www.aria-security.com/forum/showthread.php?t=51

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/archive/1/452825/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/21302

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2006/4741

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/30534

Source: cve@mitre.org

http://secunia.com/advisories/23119