CVE-2006-2300

CVE-2006-2300 describes multiple SQL injection vulnerabilities in EImagePro, affecting the keyvan1 eimagepro product. Attackers can exploit these flaws by manipulating parameters like CatID in subList.asp, SubjectID in imageList.asp, or Pic in view.asp to execute arbitrary SQL commands. This vulnerability carries a high CVSS score of 7.5, indicating a network-based attack with low complexity, requiring no authentication, and potentially leading to partial compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, exploit code is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.