CVE-2006-2300

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.74%

Published

May 11, 2006

Modified

Jun 16, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBEImagePro - 'subList.asp?CatID' SQL Injection Exploit-DBEImagePro - 'view.asp?Pic' SQL Injection

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple SQL injection vulnerabilities in EImagePro allow remote attackers to execute arbitrary SQL commands via the (1) CatID parameter to subList.asp, (2) SubjectID parameter to imageList.asp, or (3) Pic parameter to view.asp.

Affected Products (1)

keyvan1 · eimageprovulnerable

References (16)

http://downloads.securityfocus.com/vulnerabilities/exploits/eimagepro-xss.txt

Exploit

http://secunia.com/advisories/20043

ExploitVendor Advisory

http://www.osvdb.org/25331

http://www.osvdb.org/25332

http://www.osvdb.org/25333

http://www.securityfocus.com/bid/17911

Exploit

http://www.vupen.com/english/advisories/2006/1749

https://exchange.xforce.ibmcloud.com/vulnerabilities/26343

http://downloads.securityfocus.com/vulnerabilities/exploits/eimagepro-xss.txt

Exploit

http://secunia.com/advisories/20043

ExploitVendor Advisory

http://www.osvdb.org/25331

http://www.osvdb.org/25332

http://www.osvdb.org/25333

http://www.securityfocus.com/bid/17911

Exploit

http://www.vupen.com/english/advisories/2006/1749

https://exchange.xforce.ibmcloud.com/vulnerabilities/26343

KEV Catalog EPSS Scores Vendors All CVEs