Lucene search

[email protected]CVE-2006-0851

HistoryFeb 23, 2006 - 2:06 a.m.

CVE-2006-0851

2006-02-2302:06:00

[email protected]

web.nvd.nist.gov

cve-2006-0851

sql injection

ilchclan

forum module

remote attackers

arbitrary commands

8.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

82.6%

JSON

SQL injection vulnerability in the forum module of ilchClan 1.05g and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter, when creating a newpost.

Affected configurations

NVD

Node

ilch.deilchclanMatch0.0.1

ilch.deilchclanMatch1.0.0

ilch.deilchclanMatch1.0.1

ilch.deilchclanMatch1.0.2

ilch.deilchclanMatch1.0.3

ilch.deilchclanMatch1.0.4

CPENameOperatorVersion
ilch.de:ilchclanilch.de ilchclaneq0.0.1
ilch.de:ilchclanilch.de ilchclaneq1.0.0
ilch.de:ilchclanilch.de ilchclaneq1.0.1
ilch.de:ilchclanilch.de ilchclaneq1.0.2
ilch.de:ilchclanilch.de ilchclaneq1.0.3
ilch.de:ilchclanilch.de ilchclaneq1.0.4

CPE	Name	Operator	Version
ilch.de:ilchclan	ilch.de ilchclan	eq	0.0.1
ilch.de:ilchclan	ilch.de ilchclan	eq	1.0.0
ilch.de:ilchclan	ilch.de ilchclan	eq	1.0.1
ilch.de:ilchclan	ilch.de ilchclan	eq	1.0.2
ilch.de:ilchclan	ilch.de ilchclan	eq	1.0.3
ilch.de:ilchclan	ilch.de ilchclan	eq	1.0.4

References

secunia.com/advisories/18951

www.osvdb.org/23369

www.securityfocus.com/bid/16735

www.vupen.com/english/advisories/2006/0672

exchange.xforce.ibmcloud.com/vulnerabilities/24829

www.exploit-db.com/exploits/1516

8.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

82.6%

JSON

Related for CVE-2006-0851

prion1 cvelist1 nvd1