Lucene search
HistoryFeb 15, 2006 - 11:06 a.m.
CVE-2006-0693
sql injection
rb_auth.php
roberto butti calimba 0.99.2 beta
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.9 High
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
80.6%
Multiple SQL injection vulnerabilities in rb_auth.php in Roberto Butti CALimba 0.99.2 beta and earlier allow remote attackers to execute arbitrary SQL commands and bypass login authentication via the (1) login and (2) password parameters.
Affected configurations
Node
roberto_butticalimbaMatch0.99.1
ORroberto_butticalimbaMatch0.99.2_beta
| CPE | Name | Operator | Version |
|---|---|---|---|
| roberto_butti:calimba | roberto butti calimba | eq | 0.99.1 |
| roberto_butti:calimba | roberto butti calimba | eq | 0.99.2_beta |
Related
cvelist
cvelist
CVE-2006-0693
2006-02-15 11:00:00
nvd
nvd
CVE-2006-0693
2006-02-15 11:06:00
prion
prion
Sql injection
2006-02-15 11:06:00
securityvulns
securityvulns
[eVuln] CALimba Authentication Bypass Vulnerability
2006-02-18 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.9 High
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
80.6%
Related for CVE-2006-0693