Lucene search

[email protected]CVE-2006-2853

HistoryJun 06, 2006 - 8:06 p.m.

CVE-2006-2853

2006-06-0620:06:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

sql injection

vulnerability

abarcar realty portal 5.1.5

remote attackers

nvd

8.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.01 Low

EPSS

Percentile

83.1%

JSON

SQL injection vulnerability in content.php in abarcar Realty Portal 5.1.5 allows remote attackers to execute arbitrary SQL commands via the cat parameter.

CPENameOperatorVersion
abarcar:abarcar_realty_portalabarcar abarcar realty portaleq5.1.5

CPE	Name	Operator	Version
abarcar:abarcar_realty_portal	abarcar abarcar realty portal	eq	5.1.5

References

downloads.securityfocus.com/vulnerabilities/exploits/abarcar_sql_poc.txt

secunia.com/advisories/20504

www.osvdb.org/26226

www.security.nnov.ru/Mdocument929.html

www.securityfocus.com/bid/18218

www.vupen.com/english/advisories/2006/2194

exchange.xforce.ibmcloud.com/vulnerabilities/26993

8.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.01 Low

EPSS

Percentile

83.1%

JSON

Related for CVE-2006-2853

prion1 cve1