AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2006-6274

MEDIUM · CVSS 6.8 EPSS 2.07%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2006-12-04 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 6.8. It may be remotely exploitable. It involves a SQL injection risk.

CVE
CVE-2006-6274
Severity
MEDIUM
CVSS
6.8
EPSS
2.07%

Original NVD Description

SQL injection vulnerability in articles.asp in Expinion.net iNews (1) Publisher (iNP) 2.5 and earlier, and possibly (2) News Manager, allows remote attackers to execute arbitrary SQL commands via the ex parameter. NOTE: early reports of this issue reported it as XSS, but this was erroneous. The original report was for News Manager, but there is strong evidence that the correct product is Publisher.