Lucene search
HistoryJul 06, 2006 - 8:05 p.m.
CVE-2006-3384
cve-2006-3384
sql injection
vincent leclercq news
remote attackers
nvd
9.3 High
AI Score
Confidence
Low
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
0.012 Low
EPSS
Percentile
84.7%
SQL injection vulnerability in divers.php in Vincent Leclercq News 5.2 allows remote attackers to execute arbitrary SQL commands via the (1) id and (2) texte parameters.
| CPE | Name | Operator | Version |
|---|---|---|---|
| vincent_leclercq:news | vincent leclercq news | eq | 5.2 |
9.3 High
AI Score
Confidence
Low
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
0.012 Low
EPSS
Percentile
84.7%