CVE-2006-3010

no score yetEPSS 1.8%

aliacom open business management: no CVSS score yet. EPSS 1.8% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in Open Business Management (OBM) 1.0.3 pl1 allow remote attackers to execute arbitrary SQL commands via the (1) new_order and (2) order_dir parameters to (a) index.php, (b) group/group_index.php, (c) user/user_index.php, (d) list/list_index.php, and (e) company/company_index.php, and the (3) entity and (4) tf_dateafter parameter to company/company_index.php.

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
Published: 2006-06-13
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

aliacom:open_business_management

References

http://pridels0.blogspot.com/2006/06/obm-multiple-sql-inj-and-xss-vuln.html
http://secunia.com/advisories/20486
http://www.osvdb.org/26203
http://www.osvdb.org/26204
http://www.osvdb.org/26205

Check your stack JSON