Lucene search

K
cve[email protected]CVE-2006-2039
HistoryApr 26, 2006 - 6:06 p.m.

CVE-2006-2039

2006-04-2618:06:00
web.nvd.nist.gov
30
cve-2006-2039
sql injection
osticket
help center live
nvd

8.5 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

74.9%

Multiple SQL injection vulnerabilities in the osTicket module in Help Center Live before 2.1.0 allow remote attackers to execute arbitrary SQL commands via unknown vectors.

Affected configurations

NVD
Node
ubertechelp_center_liveMatch1.0
OR
ubertechelp_center_liveMatch1.2
OR
ubertechelp_center_liveMatch1.2.1
OR
ubertechelp_center_liveMatch1.2.2
OR
ubertechelp_center_liveMatch1.2.3
OR
ubertechelp_center_liveMatch1.2.4
OR
ubertechelp_center_liveMatch1.2.5
OR
ubertechelp_center_liveMatch1.2.6
OR
ubertechelp_center_liveMatch1.2.7
OR
ubertechelp_center_liveMatch1.2.8
OR
ubertechelp_center_liveMatch2.0

8.5 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

74.9%

Related for CVE-2006-2039