Lucene search

[email protected]CVE-2006-0823

HistoryFeb 21, 2006 - 11:02 p.m.

CVE-2006-0823

2006-02-2123:02:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-0823

geeklog

sql injection

vulnerability

remote attackers

nvd

8.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

79.4%

JSON

Multiple SQL injection vulnerabilities in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attackers to inject arbitrary SQL commands via the (1) userid variable to users.php or (2) sessid variable to lib-sessions.php.

CPENameOperatorVersion
geeklog:geekloggeeklogeq1.3.11_sr3
geeklog:geekloggeeklogeq1.3.11_sr2
geeklog:geekloggeeklogeq1.4.0
geeklog:geekloggeeklogeq1.3.11_sr1
geeklog:geekloggeeklogeq1.3.11

CPE	Name	Operator	Version
geeklog:geeklog	geeklog	eq	1.3.11_sr3
geeklog:geeklog	geeklog	eq	1.3.11_sr2
geeklog:geeklog	geeklog	eq	1.4.0
geeklog:geeklog	geeklog	eq	1.3.11_sr1
geeklog:geeklog	geeklog	eq	1.3.11

References

secunia.com/advisories/18920

www.geeklog.net/article.php/geeklog-1.4.0sr1

www.gulftech.org/?node=research&article_id=00102-02192006

www.osvdb.org/23348

www.securityfocus.com/archive/1/425506/100/0/threaded

www.securityfocus.com/bid/16755

www.vupen.com/english/advisories/2006/0661

exchange.xforce.ibmcloud.com/vulnerabilities/24775

8.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

79.4%

JSON

Related for CVE-2006-0823

exploitpack1 prion1 exploitdb1 nessus1