CVE-2006-3010: Aliacom Open Business Management

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in Open Business Management (OBM) 1.0.3 pl1 allow remote attackers to execute arbitrary SQL commands via the (1) new_order and (2) order_dir parameters to (a) index.php, (b) group/group_index.php, (c) user/user_index.php, (d) list/list_index.php, and (e) company/company_index.php, and the (3) entity and (4) tf_dateafter parameter to company/company_index.php.

Affected products

• Aliacom Open Business Management: version 1.0.3_pl1 only

Published 2006-06-13. Last modified 2026-06-16.