Lucene search

K
cve[email protected]CVE-2006-1585
HistoryApr 02, 2006 - 9:04 p.m.

CVE-2006-1585

2006-04-0221:04:00
NVD-CWE-Other
web.nvd.nist.gov
19
cve
2006
1585
sql injection
monalbum
index.php
image_agrandir.php

9.5 High

AI Score

Confidence

Low

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.005 Low

EPSS

Percentile

75.8%

Multiple SQL injection vulnerabilities in MonAlbum 0.8.7 allow remote attackers to execute arbitrary SQL commands via (1) the pc parameter in (a) index.php and (2) pnom, (3) pcourriel, and (4) pcommentaire parameters in (b) image_agrandir.php.

CPENameOperatorVersion
3dsrc:monalbum3dsrc monalbumeq0.8.7

9.5 High

AI Score

Confidence

Low

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.005 Low

EPSS

Percentile

75.8%

Related for CVE-2006-1585