Lucene search

K
cveMitreCVE-2006-2585
HistoryMay 25, 2006 - 10:02 a.m.

CVE-2006-2585

2006-05-2510:02:00
mitre
web.nvd.nist.gov
33
cve-2006-2585
sql injection
vulnerability
destiney links script 2.1.2
arbitrary sql commands
id parameter
remote attackers
security
nvd

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

AI Score

8.1

Confidence

Low

EPSS

0.004

Percentile

73.2%

SQL injection vulnerability in Destiney Links Script 2.1.2 allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

Nvd
Node
greg_donalddestiney_links_scriptMatch2.1.2
VendorProductVersionCPE
greg_donalddestiney_links_script2.1.2cpe:2.3:a:greg_donald:destiney_links_script:2.1.2:*:*:*:*:*:*:*

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

AI Score

8.1

Confidence

Low

EPSS

0.004

Percentile

73.2%

Related for CVE-2006-2585