Vulnerability in Haberx

CVE-2006-4853

SQL injection vulnerability in kategorix.asp in Haberx 1.02 through 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in kategorihaberx.asp.

EPSS: 0.037 (88.5th percentile) — read the EPSS interpretation.

Affected products

  • Haberx — versions 1.0.2, 1.0.3, 1.0.9
  • N/a — versions n/a

References