Lucene search
HistoryMar 30, 2006 - 11:02 a.m.
CVE-2006-1543
cve
sql injection
vscripts
vnews
kuba kunkiewicz
8.9 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.007 Low
EPSS
Percentile
79.3%
Multiple SQL injection vulnerabilities in vscripts (aka Kuba Kunkiewicz) VNews 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) loginvar parameter in (a) admin/admin.php, and the (2) news and (3) nom parameters in (b) news.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| vscripts:vnews | vscripts vnews | eq | 1.2 |
Related
prion
prion
Sql injection
2006-03-30 11:02:00
securityvulns
securityvulns
[eVuln] VNews Multiple Vulnerabilities
2006-04-12 00:00:00
8.9 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.007 Low
EPSS
Percentile
79.3%
Related for CVE-2006-1543