Lucene search

K
cve[email protected]CVE-2006-0545
HistoryFeb 04, 2006 - 2:02 a.m.

CVE-2006-0545

2006-02-0402:02:00
web.nvd.nist.gov
21
cve
2006
0545
sql injection
showflat.php
groupee
infopop
ubb.threads

8.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

81.4%

SQL injection vulnerability in showflat.php in Groupee (formerly known as Infopop) UBB.threads 6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Number parameter.

Affected configurations

NVD
Node
ubbcentralubb.threadsMatch6.0
OR
ubbcentralubb.threadsMatch6.0.1
OR
ubbcentralubb.threadsMatch6.0.2
OR
ubbcentralubb.threadsMatch6.0.3
OR
ubbcentralubb.threadsMatch6.1
OR
ubbcentralubb.threadsMatch6.1.1
OR
ubbcentralubb.threadsMatch6.2
OR
ubbcentralubb.threadsMatch6.2.1
OR
ubbcentralubb.threadsMatch6.2.2
OR
ubbcentralubb.threadsMatch6.2.3
OR
ubbcentralubb.threadsMatch6.3

8.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

81.4%

Related for CVE-2006-0545