VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 7, 2006· Updated Jun 16, 2026

CVE-2006-3430

CVE-2006-3430

Description

SQL injection vulnerability in checkprofile.asp in (1) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1 and (2) Novell ZENworks 6.2 SR1 and earlier, allows remote attackers to execute arbitrary SQL commands via the agentid parameter.

Affected products

6
  • Lumension/Patchlink Update Server3 versions
    cpe:2.3:a:lumension:patchlink_update_server:6.1:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:lumension:patchlink_update_server:6.1:*:*:*:*:*:*:*
    • cpe:2.3:a:lumension:patchlink_update_server:6.2.0.181:*:*:*:*:*:*:*
    • cpe:2.3:a:lumension:patchlink_update_server:6.2.0.189:*:*:*:*:*:*:*
  • Novell/Zenworks2 versions
    cpe:2.3:a:novell:zenworks:*:sr1:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:novell:zenworks:*:sr1:*:*:*:*:*:*range: <=6.2
    • (no CPE)range: <=6.2 SR1
  • PatchLink/Update Server (PLUS)llm-fuzzy
    Range: <6.1 P1 or >=6.2.x <6.2 SR1 P1

Patches

Vulnerability mechanics

References

10

News mentions

0

No linked articles in our index yet.