CVE-2006-2718

CVE-2006-2718 describes a vulnerability in JIWA Financials 6.4.14 where the application insecurely passes SQL Server credentials and data source names to Crystal Reports files. This allows authenticated attackers to execute arbitrary stored procedures by embedding them in a crafted .rpt file, potentially leading to the disclosure of sensitive information like usernames and cleartext passwords. With a CVSS score of 6.5, this vulnerability is of medium severity, requiring network access and authentication but having low attack complexity, and could result in partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.