VULNERABILITY INTELLIGENCE
CVE-2006-5797
CVSS score7.5 HIGH
EPSS probability1.39%
CISA KEVNot currently listed
Published2006-11-08
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Multiple SQL injection vulnerabilities in default.asp in Xenis.creator CMS allow remote attackers to execute arbitrary SQL commands via the (1) nav, (2) s, or (3) print parameters.