CVE-2006-3236

HIGH · CVSS 7.5 EPSS 1.41%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2006-06-27 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2006-3236

Severity

HIGH

CVSS

7.5

EPSS

1.41%

Original Filing — NVD Description

Multiple SQL injection vulnerabilities in thinkWMS 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in (a) index.php or (b) printarticle.php, and the (2) catid parameter in index.php.