Lucene search

[email protected]CVE-2006-0418

HistoryJan 25, 2006 - 11:03 a.m.

CVE-2006-0418

2006-01-2511:03:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-0418

eval injection

123 flash chat server

arbitrary code exec

8.5 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

81.2%

JSON

Eval injection vulnerability in 123 Flash Chat Server 5.0 and 5.1 allows attackers to execute arbitrary code via a crafted username.

CPENameOperatorVersion
topcmm_computing:123_flash_chat_servertopcmm computing 123 flash chat servereq5.1
topcmm_computing:123_flash_chat_servertopcmm computing 123 flash chat servereq5.0

CPE	Name	Operator	Version
topcmm_computing:123_flash_chat_server	topcmm computing 123 flash chat server	eq	5.1
topcmm_computing:123_flash_chat_server	topcmm computing 123 flash chat server	eq	5.0

References

www.securityfocus.com/archive/1/423164/100/0/threaded

www.securityfocus.com/bid/16360

8.5 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

81.2%

JSON

Related for CVE-2006-0418

prion1 cvelist1