Unrated severityNVD Advisory· Published Oct 31, 2006· Updated Jun 16, 2026

CVE-2006-5628

Description

SQL injection vulnerability in login.asp in UNISOR Content Management System (CMS) allows remote attackers to execute arbitrary SQL commands via the (1) user or (2) pass fields.

Affected products

UNISOR/Unisor CMS
cpe:2.3:a:unisor_cms:unisor_cms:*:*:*:*:*:*:*:*
UNISOR/Content Management System (CMS)llm-create

Patches

Vulnerability mechanics

References

securityreason.com/securityalert/1800nvd
www.securityfocus.com/archive/1/449905/100/0/threadednvd
www.securityfocus.com/bid/20770nvd
exchange.xforce.ibmcloud.com/vulnerabilities/29855nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000