ID CVE-2006-2486
Type cve
Reporter cve@mitre.org
Modified 2018-10-18T16:40:00
Description
SQL injection vulnerability in find.php in YapBB 1.2 Beta2 and earlier allows remote attackers to execute arbitrary SQL commands via the userID parameter.
{"id": "CVE-2006-2486", "bulletinFamily": "NVD", "title": "CVE-2006-2486", "description": "SQL injection vulnerability in find.php in YapBB 1.2 Beta2 and earlier allows remote attackers to execute arbitrary SQL commands via the userID parameter.", "published": "2006-05-19T23:02:00", "modified": "2018-10-18T16:40:00", "cvss": {"score": 6.4, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:N"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2006-2486", "reporter": "cve@mitre.org", "references": ["http://www.securityfocus.com/bid/17988", "https://exchange.xforce.ibmcloud.com/vulnerabilities/26456", "http://www.securityfocus.com/archive/1/434039/100/0/threaded", "http://securityreason.com/securityalert/923"], "cvelist": ["CVE-2006-2486"], "type": "cve", "lastseen": "2019-05-29T18:08:32", "history": [], "edition": 1, "hashmap": [{"key": "affectedSoftware", "hash": "adc5cd78b7becfa3fb99d06aacce4423"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "d1dd6f313cbbf23dd94722b9568a3a20"}, {"key": "cpe23", "hash": "aeb6f724244d3dcd02f98fcf04cba9f8"}, {"key": "cvelist", "hash": "1e7ffb6b30861b956ac9697bd731c92c"}, {"key": "cvss", "hash": "0b87419295d927d4e06fbb2171061bc6"}, {"key": "cvss2", "hash": "bcb39ea622652e3d23ed488b49c7a0bf"}, {"key": "cvss3", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "cwe", "hash": "78a7a5cbaf09985c14389298e454e7db"}, {"key": "description", "hash": "4e25f2ae442ad244c6933247c05b1366"}, {"key": "href", "hash": "069eee909c3336c3f0afc53fc2ed5ec7"}, {"key": "modified", "hash": "73be0b09565be1d0ff6adab35bc416c7"}, {"key": "published", "hash": "3c2b7ec298f4049a38b272661109122a"}, {"key": "references", "hash": "0ae2c12f667934e51c66d792710d574c"}, {"key": "reporter", "hash": "444c2b4dda4a55437faa8bef1a141e84"}, {"key": "title", "hash": "47d192ef57fe55eed6d8b0de52a0bf1d"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "f508ca0b971582186e498574cac1249142678f88a7cb7104b6c6f5f703cd2033", "viewCount": 0, "enchantments": {"dependencies": {"references": [{"type": "osvdb", "idList": ["OSVDB:25819"]}], "modified": "2019-05-29T18:08:32"}, "score": {"value": 7.2, "vector": "NONE", "modified": "2019-05-29T18:08:32"}, "vulnersScore": 7.2}, "objectVersion": "1.3", "cpe": ["cpe:/a:yapbb:yapbb:1.2", "cpe:/a:yapbb:yapbb:1.1", "cpe:/a:yapbb:yapbb:1.2_beta2"], "affectedSoftware": [{"name": "yapbb yapbb", "operator": "eq", "version": "1.1"}, {"name": "yapbb yapbb", "operator": "eq", "version": "1.2_beta2"}, {"name": "yapbb yapbb", "operator": "eq", "version": "1.2"}], "cvss2": {"cvssV2": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 6.4, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false}, "cvss3": {}, "cpe23": ["cpe:2.3:a:yapbb:yapbb:1.2_beta2:*:*:*:*:*:*:*", "cpe:2.3:a:yapbb:yapbb:1.1:*:*:*:*:*:*:*", "cpe:2.3:a:yapbb:yapbb:1.2:*:*:*:*:*:*:*"], "cwe": ["NVD-CWE-Other"]}
{"osvdb": [{"lastseen": "2017-04-28T13:20:22", "bulletinFamily": "software", "description": "# No description provided by the source\n\n## References:\nVendor URL: http://sourceforge.net/projects/yapbb\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-05/0299.html\nISS X-Force ID: 26456\n[CVE-2006-2486](https://vulners.com/cve/CVE-2006-2486)\nBugtraq ID: 17988\n", "modified": "2006-05-15T22:55:06", "published": "2006-05-15T22:55:06", "href": "https://vulners.com/osvdb/OSVDB:25819", "id": "OSVDB:25819", "title": "YapBB find.php userID Variable SQL Injection", "type": "osvdb", "cvss": {"score": 6.4, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:NONE/"}}]}