Lucene search

MitreCVE-2006-0087

HistoryJan 05, 2006 - 11:03 a.m.

CVE-2006-0087

2006-01-0511:03:00

mitre

web.nvd.nist.gov

cve-2006-0087

sql injection

lizard cart cms

remote attackers

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.4

Confidence

Low

EPSS

0.422

Percentile

97.3%

JSON

SQL injection vulnerability in (1) pages.php and (2) detail.php in Lizard Cart CMS 1.04 allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected configurations

Nvd

Node

lizard_cartlizard_cart_cmsMatch1.0.4

VendorProductVersionCPE
lizard_cartlizard_cart_cms1.0.4cpe:2.3:a:lizard_cart:lizard_cart_cms:1.0.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
lizard_cart	lizard_cart_cms	1.0.4	cpe:2.3:a:lizard_cart:lizard_cart_cms:1.0.4:::::::*

References

secunia.com/advisories/18297

securityreason.com/securityalert/314

securitytracker.com/id?1015435

www.evuln.com/vulns/12/summary.html

www.osvdb.org/22199

www.osvdb.org/22200

www.securityfocus.com/archive/1/420772/100/0/threaded

www.securityfocus.com/bid/16140

www.vupen.com/english/advisories/2006/0029

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.4

Confidence

Low

EPSS

0.422

Percentile

97.3%

JSON

Related for CVE-2006-0087