Lucene search
HistoryApr 18, 2006 - 10:02 a.m.
CVE-2006-1817
cve-2006-1817
sql injection
authcheck.php
warforge.news 1.0
security vulnerability
nvd
8.8 High
AI Score
Confidence
Low
2.6 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
0.022 Low
EPSS
Percentile
89.2%
SQL injection vulnerability in authcheck.php in warforge.NEWS 1.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the (1) authusername and possibly the (2) authpassword cookie.
| CPE | Name | Operator | Version |
|---|---|---|---|
| the_war_forge:warforge.news | the war forge warforge.news | eq | 1.0 |
Related
prion
prion
Sql injection
2006-04-18 10:02:00
securityvulns
securityvulns
[eVuln] warforge.NEWS SQL Injection and Multiple XSS Vulnerabilities
2006-04-27 00:00:00
8.8 High
AI Score
Confidence
Low
2.6 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
0.022 Low
EPSS
Percentile
89.2%
Related for CVE-2006-1817