CVE-2006-1557: Skintech X-Changer

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in X-Changer 0.2 allow remote attackers to execute arbitrary SQL commands via the (1) from and (2) into parameters in a calculate action, and the (3) id parameter in an edit action to index.php.

Affected products

• Skintech X-Changer: version 0.20 only

Published 2006-03-31. Last modified 2026-06-16.