CVE-2006-5945

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.27%

Published

Nov 17, 2006

Modified

Jun 16, 2026

Public PoC / Exploit (3)

All weaponized →

Exploit-DBCar Site Manager - '/csm/asp/detail.asp?p' SQL Injection Exploit-DBCar Site Manager - '/csm/asp/listings.asp' Multiple SQL Injections TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple SQL injection vulnerabilities in MGinternet Car Site Manager (CSM) allow remote attackers to execute arbitrary SQL commands via the (1) p parameter to (a) csm/asp/detail.asp, or the (2) l, (3) typ, or (4) loc parameter to (b) csm/asp/listings.asp.

Affected Products (1)

mginternet · car_site_managervulnerable

References (14)

http://s-a-p.ca/index.php?page=OurAdvisories&id=17

Vendor AdvisoryURL Repurposed

http://secunia.com/advisories/22914

Vendor Advisory

http://securityreason.com/securityalert/1876

http://www.securityfocus.com/archive/1/451557/100/0/threaded

http://www.securityfocus.com/bid/21066

ExploitVendor Advisory

http://www.vupen.com/english/advisories/2006/4532

https://exchange.xforce.ibmcloud.com/vulnerabilities/30273

KEV Catalog EPSS Scores Vendors All CVEs