VULNERABILITY INTELLIGENCE
CVE-2006-6861
CVSS score10 HIGH
EPSS probability1.46%
CISA KEVNot currently listed
Published2006-12-31
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Multiple SQL injection vulnerabilities in Outfront Spooky Login 2.7 allow remote attackers to execute arbitrary SQL commands via (1) the UserUpdate parameter to login/register.asp or (2) unspecified parameters to includes/a_register.asp.