CVE-2006-6066 - Vulnerability Details - OpenCVE

Multiple SQL injection vulnerabilities in Dragon Calendar / Events Listing 2.x allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter to (a) admin_login.asp, the (3) ID parameter to (b) event_searchdetail.asp, or the (4) VenueID parameter to (c) venue_detail.asp.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Dragon Internet	Events Listing

Configuration 1 [-]

cpe:2.3:a:dragon_internet:events_listing:2.0.01:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://s-a-p.ca/index.php?page=OurAdvisories&id=32
http://secunia.com/advisories/22930
http://www.osvdb.org/30443
http://www.osvdb.org/30444
http://www.osvdb.org/30445
http://www.securityfocus.com/archive/1/451632/100/100/threaded
http://www.securityfocus.com/bid/21098
http://www.vupen.com/english/advisories/2006/4533
https://exchange.xforce.ibmcloud.com/vulnerabilities/30296

History

Fri, 11 Jul 2025 13:45:00 +0000

Type	Values Removed	Values Added
Metrics	epss `{'score': 0.0135}`	epss `{'score': 0.01405}`

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2006-11-22T02:00:00

Updated: 2024-08-07T20:12:31.604Z

Reserved: 2006-11-21T00:00:00

Link: CVE-2006-6066

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2006-11-22T02:07:00.000

Modified: 2025-04-09T00:30:58.490

Link: CVE-2006-6066

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-11-15T00:00:00", "descriptions": [{"lang": "en", "value": "Multiple SQL injection vulnerabilities in Dragon Calendar / Events Listing 2.x allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter to (a) admin_login.asp, the (3) ID parameter to (b) event_searchdetail.asp, or the (4) VenueID parameter to (c) venue_detail.asp."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-17T20:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "30444", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/30444"}, {"name": "ADV-2006-4533", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/4533"}, {"name": "20061115 Dragon calendar [ login bypass & injection sql ]", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/451632/100/100/threaded"}, {"tags": ["x_refsource_MISC"], "url": "http://s-a-p.ca/index.php?page=OurAdvisories&id=32"}, {"name": "30443", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/30443"}, {"name": "22930", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/22930"}, {"name": "30445", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/30445"}, {"name": "21098", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/21098"}, {"name": "dragoneventslisting-event-sql-injection(30296)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30296"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2006-6066", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple SQL injection vulnerabilities in Dragon Calendar / Events Listing 2.x allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter to (a) admin_login.asp, the (3) ID parameter to (b) event_searchdetail.asp, or the (4) VenueID parameter to (c) venue_detail.asp."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "30444", "refsource": "OSVDB", "url": "http://www.osvdb.org/30444"}, {"name": "ADV-2006-4533", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/4533"}, {"name": "20061115 Dragon calendar [ login bypass & injection sql ]", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/451632/100/100/threaded"}, {"name": "http://s-a-p.ca/index.php?page=OurAdvisories&id=32", "refsource": "MISC", "url": "http://s-a-p.ca/index.php?page=OurAdvisories&id=32"}, {"name": "30443", "refsource": "OSVDB", "url": "http://www.osvdb.org/30443"}, {"name": "22930", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/22930"}, {"name": "30445", "refsource": "OSVDB", "url": "http://www.osvdb.org/30445"}, {"name": "21098", "refsource": "BID", "url": "http://www.securityfocus.com/bid/21098"}, {"name": "dragoneventslisting-event-sql-injection(30296)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30296"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T20:12:31.604Z"}, "title": "CVE Program Container", "references": [{"name": "30444", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/30444"}, {"name": "ADV-2006-4533", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2006/4533"}, {"name": "20061115 Dragon calendar [ login bypass & injection sql ]", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/451632/100/100/threaded"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://s-a-p.ca/index.php?page=OurAdvisories&id=32"}, {"name": "30443", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/30443"}, {"name": "22930", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/22930"}, {"name": "30445", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/30445"}, {"name": "21098", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/21098"}, {"name": "dragoneventslisting-event-sql-injection(30296)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30296"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-6066", "datePublished": "2006-11-22T02:00:00", "dateReserved": "2006-11-21T00:00:00", "dateUpdated": "2024-08-07T20:12:31.604Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:dragon_internet:events_listing:2.0.01:*:*:*:*:*:*:*", "matchCriteriaId": "ED7DA041-94FE-442F-8E7D-C5595019746E", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Multiple SQL injection vulnerabilities in Dragon Calendar / Events Listing 2.x allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter to (a) admin_login.asp, the (3) ID parameter to (b) event_searchdetail.asp, or the (4) VenueID parameter to (c) venue_detail.asp."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de inyecci\u00f3n SQL en Dragon Calendar / Events Listing 2.x permite a un atacante remto ejecuvar comandos SQL de su elecci\u00f3n a trav\u00e9s de los par\u00e1metros (1) username o (2) password a (a) admin_login.asp, el (3) par\u00e1metro ID a (b) event_searchdetail.asp, o el par\u00e1metro (4) VenueID a (c) venue_detail.asp."}], "id": "CVE-2006-6066", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": false}]}, "published": "2006-11-22T02:07:00.000", "references": [{"source": "[email protected]", "tags": ["Exploit", "Vendor Advisory", "URL Repurposed"], "url": "http://s-a-p.ca/index.php?page=OurAdvisories&id=32"}, {"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/22930"}, {"source": "[email protected]", "url": "http://www.osvdb.org/30443"}, {"source": "[email protected]", "url": "http://www.osvdb.org/30444"}, {"source": "[email protected]", "url": "http://www.osvdb.org/30445"}, {"source": "[email protected]", "url": "http://www.securityfocus.com/archive/1/451632/100/100/threaded"}, {"source": "[email protected]", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/21098"}, {"source": "[email protected]", "url": "http://www.vupen.com/english/advisories/2006/4533"}, {"source": "[email protected]", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30296"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Vendor Advisory", "URL Repurposed"], "url": "http://s-a-p.ca/index.php?page=OurAdvisories&id=32"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/22930"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/30443"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/30444"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/30445"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/451632/100/100/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/21098"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2006/4533"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30296"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "[email protected]", "type": "Primary"}]}