CVE-2006-6092

Name of the Vulnerable Software and Affected Versions 20/20 Auto Gallery (affected versions not specified)

Description The issue concerns SQL injection vulnerabilities in the vehiclelistings.asp file. Remote attackers can execute arbitrary SQL commands by manipulating various parameters, including vehicleID, categoryID list, sale type, stock number, manufacturer, model, year, vin, and listing price.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.