Lucene search
HistoryJun 06, 2006 - 8:06 p.m.
CVE-2006-2835
cve-2006-2835
sql injection
saphplesson 2.0
remote attackers
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.3 High
AI Score
Confidence
Low
0.079 Low
EPSS
Percentile
94.3%
SQL injection vulnerability in saphplesson 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) forumid parameter in add.php and (2) lessid parameter in show.php.
Affected configurations
Node
arablesssaphplessonMatch2.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| arabless:saphplesson | arabless saphplesson | eq | 2.0 |
References
Related
checkpoint_advisories
checkpoint_advisories
Saphplesson id Parameter SQL Injection - Ver2 (CVE-2006-2835)
2014-01-07 00:00:00
Saphplesson id Parameter SQL Injection - Ver2 (CVE-2006-2835)
2014-02-03 00:00:00
cvelist
cvelist
CVE-2006-2835
2006-06-06 20:03:00
prion
prion
Sql injection
2006-06-06 20:06:00
nvd
nvd
CVE-2006-2835
2006-06-06 20:06:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.3 High
AI Score
Confidence
Low
0.079 Low
EPSS
Percentile
94.3%
Related for CVE-2006-2835