Lucene search

[email protected]CVE-2006-2980

HistoryJun 12, 2006 - 10:02 p.m.

CVE-2006-2980

2006-06-1222:02:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-2980

sql injection

viart shop

security vulnerability

nvd

9.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

70.4%

JSON

SQL injection vulnerability in block_forum_topic_new.php in ViArt Shop Free 2.5.5, and possibly other distributions including Light, Standard, and Enterprise, might allow remote attackers to execute arbitrary SQL commands via unknown vectors, probably involving the forum_id parameter.

CPENameOperatorVersion
viart_ltd:viart_shop_freeviart ltd viart shop freeeq2.5.5_enterprise
viart_ltd:viart_shop_freeviart ltd viart shop freeeq2.5.5_light
viart_ltd:viart_shop_freeviart ltd viart shop freeeq2.5.5_standard

CPE	Name	Operator	Version
viart_ltd:viart_shop_free	viart ltd viart shop free	eq	2.5.5_enterprise
viart_ltd:viart_shop_free	viart ltd viart shop free	eq	2.5.5_light
viart_ltd:viart_shop_free	viart ltd viart shop free	eq	2.5.5_standard

References

www.attrition.org/pipermail/vim/2006-June/000846.html

www.codetosell.com/downloads/xss_fix.zip

exchange.xforce.ibmcloud.com/vulnerabilities/27684

9.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

70.4%

JSON