CVE-2006-5242

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

SQL injection vulnerability in Etomite Content Management System (CMS) before 0.6.1.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Oct 12, 2006
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2006

CVE-2006-52437.5Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Doc 1.4 and earlier, when register_globals is enabled, allow remote attaCVE-2006-52445.1Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Blog 1.4 and earlier, when register_globals is enabled, allow remote attCVE-2006-52457.5Eazy Cart allows remote attackers to bypass authentication and gain administrative access via a direct request for admin/home/index.php, andCVE-2006-52465.0Eazy Cart allows remote attackers to change prices and other critical fields via unspecified vectors to easycart.php, probably including theCVE-2006-52476.8Multiple cross-site scripting (XSS) vulnerabilities in Eazy Cart allow remote attackers to inject arbitrary web script or HTML via easycart.CVE-2006-52487.8Eazy Cart stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a custCVE-2006-52497.5PHP remote file inclusion vulnerability in tagmin/delTagUser.php in TagIt! Tagboard 2.1.B Build 2 (tagit2b) allows remote attackers to execuCVE-2006-52505.1PHP remote file inclusion vulnerability in lib/googlesearch/GoogleSearch.php in BlueShoes 4.6_public and earlier allows remote attackers to CVE-2006-52517.5PHP remote file inclusion vulnerability in index.php in Deep CMS 2.0a allows remote attackers to execute arbitrary PHP code via a URL in theCVE-2006-52525.1PHP remote file inclusion vulnerability in includes/core.lib.php in Webmedia Explorer 2.8.7 allows remote attackers to execute arbitrary PHPCVE-2006-52537.5PHP remote file inclusion vulnerability in strload.php in Dayana Networks phpOnline (aka PHP-Online) 2.1 allows remote attackers to execute CVE-2006-52547.5PHP remote file inclusion vulnerability in registration_detailed.inc.php in Mark Van Bellen Detailed User Registration (com_registration_det
CVE-2006-5242: High severity, CVSS 7.5 | Vulnix