CVE coverage

CVE-2006-6157

CVSS 7.5 10 detections found

SQL injection vulnerability in index.php in ContentNow 1.39 and earlier allows remote attackers to execute arbitrary SQL commands via the pageid parameter. NOTE: this issue can be leveraged for path disclosure with an invalid pageid parameter.

Detection rules

Source	Rule	Status	Updated
suricata	ET WEB_SPECIFIC_APPS ContentNow SQL Injection Attempt -- index.php pageid SELECT	rev 10	2020-09-10
suricata	ET WEB_SPECIFIC_APPS ContentNow SQL Injection Attempt -- index.php pageid UNION SELECT	rev 8	2020-09-10
suricata	ET WEB_SPECIFIC_APPS ContentNow SQL Injection Attempt -- index.php pageid INSERT	rev 8	2020-09-10
suricata	ET WEB_SPECIFIC_APPS ContentNow SQL Injection Attempt -- index.php pageid DELETE	rev 9	2020-09-10
suricata	ET WEB_SPECIFIC_APPS ContentNow SQL Injection Attempt -- index.php pageid UPDATE	rev 8	2020-09-10
snort	ET WEB_SPECIFIC_APPS ContentNow SQL Injection Attempt -- index.php pageid SELECT	rev 7	2010-10-21
snort	ET WEB_SPECIFIC_APPS ContentNow SQL Injection Attempt -- index.php pageid UNION SELECT	rev 5	2010-10-21
snort	ET WEB_SPECIFIC_APPS ContentNow SQL Injection Attempt -- index.php pageid INSERT	rev 5	2010-10-21
snort	ET WEB_SPECIFIC_APPS ContentNow SQL Injection Attempt -- index.php pageid DELETE	rev 6	2010-10-21
snort	ET WEB_SPECIFIC_APPS ContentNow SQL Injection Attempt -- index.php pageid UPDATE	rev 5	2010-10-21