CVE-2006-6861: Outfront Spooky Login

High severity, CVSS 10.0. EPSS: 1.5% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in Outfront Spooky Login 2.7 allow remote attackers to execute arbitrary SQL commands via (1) the UserUpdate parameter to login/register.asp or (2) unspecified parameters to includes/a_register.asp.

Affected products

• Outfront Spooky Login: version 2.7 only

Published 2006-12-31. Last modified 2026-06-16.