CVE-2006-2128: Deltascripts Pro Publish

High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in Pro Publish 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) email and (2) password parameter to (a) admin/login.php, (3) find_str parameter to (b) search.php, or (4) artid parameter to (c) art.php, or (5) catid parameter to (d) cat.php.

Affected products

• Deltascripts Pro Publish: version 2.0 only

Published 2006-05-01. Last modified 2026-06-16.