Lucene search
HistoryMar 21, 2006 - 1:06 a.m.
CVE-2006-1330
cve-2006-1330
sql injection
phpwebsite 0.83
remote code execution
security vulnerability
9.5 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
70.5%
Multiple SQL injection vulnerabilities in phpWebsite 0.83 and earlier allow remote attackers to execute arbitrary SQL commands via the sid parameter to (1) friend.php or (2) article.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| phpwebsite:phpwebsite | phpwebsite | eq | 0.8.2 |
| phpwebsite:phpwebsite | phpwebsite | eq | 0.8.3 |
| phpwebsite:phpwebsite | phpwebsite | eq | 0.7.3 |
9.5 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
70.5%
Related for CVE-2006-1330