CVE-2006-1501

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.22%

Published

Mar 30, 2006

Modified

Jun 16, 2026

Public PoC / Exploit (1)

All weaponized →

Exploit-DBOneOrZero 1.6.3 Helpdesk - 'index.php' SQL Injection

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

SQL injection vulnerability in index.php in OneOrZero 1.6.3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly in the kans action.

Weaknesses (CWE)

CWE-89

Affected Products (1)

oneorzero · oneorzerovulnerable

References (12)

http://osvdb.org/ref/24/24228-oneorzero.txt

Exploit

http://secunia.com/advisories/19446

ExploitVendor Advisory

http://www.osvdb.org/24228

Exploit

http://www.securityfocus.com/bid/17298

http://www.vupen.com/english/advisories/2006/1146

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/25511

http://osvdb.org/ref/24/24228-oneorzero.txt

Exploit

http://secunia.com/advisories/19446

ExploitVendor Advisory

http://www.osvdb.org/24228

Exploit

http://www.securityfocus.com/bid/17298

http://www.vupen.com/english/advisories/2006/1146

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/25511

KEV Catalog EPSS Scores Vendors All CVEs