Lucene search
MitreCVE-2006-1616HistoryApr 05, 2006 - 10:04 a.m.
CVE-2006-1616
2006-04-0510:04:00
mitre
web.nvd.nist.gov
26
cve-2006-1616
sql injection
advanced poll 2.02
remote attackers
arbitrary sql commands
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.4
Confidence
Low
EPSS
0.002
Percentile
51.9%
Multiple SQL injection vulnerabilities in Advanced Poll 2.02 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to comments.php or (2) poll_id parameter to page.php.
Affected configurations
Node
advanced_polladvanced_pollMatch2.0.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| advanced_poll | advanced_poll | 2.0.2 | cpe:2.3:a:advanced_poll:advanced_poll:2.0.2:*:*:*:*:*:*:* |
Related
prion
prion
Sql injection
2006-04-05 10:04:00
Cross site scripting
2006-04-05 10:04:00
cvelist
cvelist
CVE-2006-1616
2006-04-05 10:00:00
CVE-2006-1617
2006-04-05 10:00:00
nvd
nvd
CVE-2006-1616
2006-04-05 10:04:00
CVE-2006-1617
2006-04-05 10:04:00
cve
cve
CVE-2006-1617
2006-04-05 10:04:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.4
Confidence
Low
EPSS
0.002
Percentile
51.9%
Related for CVE-2006-1616