CVE-2006-4347
SQL injection vulnerability in user logon authentication request handling in Cool_CoolD.exe in...
SQL injection vulnerability in user logon authentication request handling in Cool_CoolD.exe in Cool Manager 5.0 (5,60,90,28) and Cool Messenger Office/School Server 5.5 (5,65,12,13) allows remote attackers to execute arbitrary SQL commands via the username field.
Exploit likelihood
What each source reports
NVD Score used
SQL injection vulnerability in user logon authentication request handling in Cool_CoolD.exe in Cool Manager 5.0 (5,60,90,28) and Cool Messenger Office/School Server 5.5 (5,65,12,13) allows remote attackers to execute arbitrary SQL commands via the username field.
- Record
CVE-2006-4347- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
SQL injection vulnerability in user logon authentication request handling in Cool_CoolD.exe in Cool Manager 5.0 (5,60,90,28) and Cool Messenger Office/School Server 5.5 (5,65,12,13) allows remote attackers to execute arbitrary SQL commands via the username field.
- Record
CVE-2006-4347- Updated
- 2026-11-02
EUVDEUVD-2006-4335 No score
SQL injection vulnerability in user logon authentication request handling in Cool_CoolD.exe in Cool Manager 5.0 (5,60,90,28) and Cool Messenger Office/School Server 5.5 (5,65,12,13) allows remote attackers to execute arbitrary SQL commands via the username field.
- Record
EUVD-2006-4335- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fg6h-6867-7xrg No score
SQL injection vulnerability in user logon authentication request handling in Cool_CoolD.exe in...
SQL injection vulnerability in user logon authentication request handling in Cool_CoolD.exe in Cool Manager 5.0 (5,60,90,28) and Cool Messenger Office/School Server 5.5 (5,65,12,13) allows remote attackers to execute arbitrary SQL commands via the username field.
- Record
GHSA-fg6h-6867-7xrg- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-4347 is a high vulnerability (CVSS 7.5) in Jiran Cool Manager, published August 24, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.46%, the 73rd percentile. No source names a fixed version.
References
archives.neohapsis.com/archives/fulldisclosure/2006-08/0605.html
securityfocus.com/bid/19669
secunia.com/advisories/21569
osvdb.org/28117
vupen.com/english/advisories/2006/3362
vuln.sg/coolmessenger55-en.html
exchange.xforce.ibmcloud.com/vulnerabilities/28531
nvd.nist.gov/vuln/detail/CVE-2006-4347
github.com/advisories/GHSA-fg6h-6867-7xrg