CVE-2006-2300

no score yetEPSS 1.8%

Multiple SQL injection vulnerabilities in EImagePro allow remote attackers to execute arbitrary SQL commands via the (1) CatID parameter to subList.asp, (2) SubjectID parameter to imageList.asp, or (3) Pic parameter to view.asp.

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
Published: 2006-05-11
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

keyvan1:eimagepro

References

http://downloads.securityfocus.com/vulnerabilities/exploits/eimagepro-xss.txt
http://secunia.com/advisories/20043
http://www.osvdb.org/25331
http://www.osvdb.org/25332
http://www.osvdb.org/25333

Check your stack JSON