Lucene search
HistoryJun 27, 2006 - 10:05 a.m.
CVE-2006-3236
cve-2006-3236
sql injection
thinkwms
remote attackers
arbitrary commands
security vulnerability
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.9 High
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
79.0%
Multiple SQL injection vulnerabilities in thinkWMS 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in (a) index.php or (b) printarticle.php, and the (2) catid parameter in index.php.
Affected configurations
Node
thinkfactorythinkwmsRange≤1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| thinkfactory:thinkwms | thinkfactory thinkwms | le | 1.0 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.9 High
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
79.0%
Related for CVE-2006-3236