CVE-2006-3430

No fix known EPSS 2%

SQL injection vulnerability in checkprofile.asp in (1) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1 and (2) Novell ZENworks 6.2 SR1 and earlier, allows remote attackers to execute arbitrary SQL commands via the agentid parameter.

Published 2006-07-07 · CVE record · OSV

Products: lumension patchlink_update_server, novell zenworks