CVE-2006-6215

Published: Dec 1, 2006Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in Wallpaper Website (Wallpaper Complete Website) 1.0.09 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) login or (2) password parameter to (a) process.php, or the (3) wallpaperid parameter to (b) dlwallpaper.php.

Affected (1)

Products: Wallpaper: Wallpaper Complete Website

Wallpaper

1 product

Wallpaper Complete Website

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Wallpaper Wallpaper Complete Website	Up to 1.0.09

References (2)

http://www.vupen.com/english/advisories/2006/4687

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/4687

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.