Lucene search

K
cve[email protected]CVE-2006-0696
HistoryFeb 15, 2006 - 11:06 a.m.

CVE-2006-0696

2006-02-1511:06:00
web.nvd.nist.gov
32
sql injection
zen cart
vulnerability
remote attackers
nvd

8.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

79.4%

SQL injection vulnerability in Zen Cart before 1.2.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected configurations

NVD
Node
zen_cartzen_cartMatch1.1.0
OR
zen_cartzen_cartMatch1.1.1d
OR
zen_cartzen_cartMatch1.1.2d
OR
zen_cartzen_cartMatch1.1.3d
OR
zen_cartzen_cartMatch1.1.4d
OR
zen_cartzen_cartMatch1.2.0d
OR
zen_cartzen_cartMatch1.2.1_patch1
OR
zen_cartzen_cartMatch1.2.1d
OR
zen_cartzen_cartMatch1.2.2d
OR
zen_cartzen_cartMatch1.2.3d
OR
zen_cartzen_cartMatch1.2.4.1
OR
zen_cartzen_cartMatch1.2.4d
OR
zen_cartzen_cartMatch1.2.5d
OR
zen_cartzen_cartMatch1.2.6d

8.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

79.4%

Related for CVE-2006-0696