CVE-2006-6450
Multiple SQL injection vulnerabilities in dagent/downloadreport.asp in Novell ZENworks Patch...
Multiple SQL injection vulnerabilities in dagent/downloadreport.asp in Novell ZENworks Patch Management (ZPM) before 6.3.2.700 allow remote attackers to execute arbitrary SQL commands via the (1) agentid and (2) pass parameters.
Exploit likelihood
What each source reports
NVD Score used
Multiple SQL injection vulnerabilities in dagent/downloadreport.asp in Novell ZENworks Patch Management (ZPM) before 6.3.2.700 allow remote attackers to execute arbitrary SQL commands via the (1) agentid and (2) pass parameters.
- Record
CVE-2006-6450- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Multiple SQL injection vulnerabilities in dagent/downloadreport.asp in Novell ZENworks Patch Management (ZPM) before 6.3.2.700 allow remote attackers to execute arbitrary SQL commands via the (1) agentid and (2) pass parameters.
- Record
CVE-2006-6450- Updated
- 2026-11-02
EUVDEUVD-2006-6433 No score
Multiple SQL injection vulnerabilities in dagent/downloadreport.asp in Novell ZENworks Patch Management (ZPM) before 6.3.2.700 allow remote attackers to execute arbitrary SQL commands via the (1) agentid and (2) pass parameters.
- Record
EUVD-2006-6433- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3jp3-h3gj-cc7m No score
Multiple SQL injection vulnerabilities in dagent/downloadreport.asp in Novell ZENworks Patch...
Multiple SQL injection vulnerabilities in dagent/downloadreport.asp in Novell ZENworks Patch Management (ZPM) before 6.3.2.700 allow remote attackers to execute arbitrary SQL commands via the (1) agentid and (2) pass parameters.
- Record
GHSA-3jp3-h3gj-cc7m- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-6450 is a high vulnerability (CVSS 7.5) in Novell Zenworks Patch Management Server, published December 10, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 22.2%, the 97th percentile. No source names a fixed version.
References
secure-support.novell.com/KanisaPlatform/Publishing/298/3506963_f.SAL_Public.html
exchange.xforce.ibmcloud.com/vulnerabilities/30768
vupen.com/english/advisories/2006/4864
securityfocus.com/bid/21473
secunia.com/advisories/23243
nvd.nist.gov/vuln/detail/CVE-2006-6450
github.com/advisories/GHSA-3jp3-h3gj-cc7m