Lucene search
HistoryApr 05, 2006 - 10:04 a.m.
CVE-2006-1616
cve-2006-1616
sql injection
advanced poll 2.02
remote attackers
arbitrary sql commands
8.9 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
51.3%
Multiple SQL injection vulnerabilities in Advanced Poll 2.02 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to comments.php or (2) poll_id parameter to page.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| advanced_poll:advanced_poll | advanced poll | eq | 2.0.2 |
Related
prion
prion
Sql injection
2006-04-05 10:04:00
Cross site scripting
2006-04-05 10:04:00
cve
cve
CVE-2006-1617
2006-04-05 10:04:00
8.9 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
51.3%
Related for CVE-2006-1616