CVE-2006-3577

CVE-2006-3577 describes a SQL injection vulnerability in LifeType 1.0.5, specifically within the index.php file. An attacker can exploit this by manipulating the 'Date' parameter in a 'Default op' to execute arbitrary SQL commands. This vulnerability carries a CVSS score of 7.5, indicating high severity due to its network-based attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or Metasploit/Nuclei modules, an ExploitDB entry (EDB-28166) confirms the availability of exploit code, though community discussion and media coverage are minimal.