Lucene search
HistoryJun 02, 2006 - 10:18 a.m.
CVE-2006-2771
cve
2006
2771
hogstorps
hogstorp
guestbook
admin
radera
tabort
nvd
security vulnerability
remote attack
7.5 High
AI Score
Confidence
Low
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
0.04 Low
EPSS
Percentile
91.9%
admin/radera/tabort.asp in Hogstorps hogstorp guestbook 2.0 does not verify user credentials, which allows remote attackers to delete arbitrary posts via a modified delID parameter.
| CPE | Name | Operator | Version |
|---|---|---|---|
| hogstorps:hogstorp_guestbook | hogstorps hogstorp guestbook | eq | 2.0 |
7.5 High
AI Score
Confidence
Low
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
0.04 Low
EPSS
Percentile
91.9%
Related for CVE-2006-2771