Unrated severityNVD Advisory· Published Nov 24, 2006· Updated Jun 16, 2026
CVE-2006-6092
CVE-2006-6092
Description
Multiple SQL injection vulnerabilities in vehiclelistings.asp in 20/20 Auto Gallery allow remote attackers to execute arbitrary SQL commands via the (1) vehicleID, (2) categoryID_list, (3) sale_type, (4) stock_number, (5) manufacturer, (6) model, (7) vehicleID, (8) year, (9) vin, and (10) listing_price parameters.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:a:20_20_applications:20_20_auto_gallery:*:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
7- www.securityfocus.com/bid/21154nvdExploit
- secunia.com/advisories/22974nvdVendor Advisory
- s-a-p.ca/index.phpnvdURL Repurposed
- securityreason.com/securityalert/1916nvd
- www.securityfocus.com/archive/1/451947/100/100/threadednvd
- www.vupen.com/english/advisories/2006/4601nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/30400nvd
News mentions
0No linked articles in our index yet.