Lucene search

[email protected]CVE-2006-3065

HistoryJun 19, 2006 - 10:02 a.m.

CVE-2006-3065

2006-06-1910:02:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-3065

sql injection

engine

shards

blog.php

blur6ex

remote attackers

arbitrary sql commands

id parameter

proc_reply action

blog shard

vulnerability

nvd

8.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

82.4%

JSON

SQL injection vulnerability in engine/shards/blog.php in blur6ex 0.3.462 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a proc_reply action in the blog shard. NOTE: This is a similar vulnerability to CVE-2006-1763, but the affected code and versions are different.

CPENameOperatorVersion
blursoft:blur6exblursoft blur6exeq0.3.462

CPE	Name	Operator	Version
blursoft:blur6ex	blursoft blur6ex	eq	0.3.462

References

secunia.com/advisories/20646

securityreason.com/securityalert/1113

www.securityfocus.com/archive/1/437015/100/0/threaded

www.vupen.com/english/advisories/2006/2341

exchange.xforce.ibmcloud.com/vulnerabilities/27120

www.exploit-db.com/exploits/1904

8.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

82.4%

JSON

Related for CVE-2006-3065

prion1 cve1