CVE-2006-1557

CVE-2006-1557 describes multiple SQL injection vulnerabilities in X-Changer 0.2, allowing remote attackers to execute arbitrary SQL commands. Specifically, the "from" and "into" parameters in a calculate action, and the "id" parameter in an edit action to index.php are susceptible. This vulnerability carries a CVSS score of 7.5 (High), indicating a critical risk due to its network-based attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, exploit code is publicly available via ExploitDB (EDB-27533), though there is no evidence of active exploitation or significant community discussion.