Lucene search

MitreCVE-2006-3560

HistoryJul 13, 2006 - 1:05 a.m.

CVE-2006-3560

2006-07-1301:05:00

mitre

web.nvd.nist.gov

cve-2006-3560

sql injection

blue dojo graffiti forums 1.0

remote attackers

topics.php

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.8

Confidence

Low

EPSS

0.011

Percentile

84.7%

JSON

SQL injection vulnerability in topics.php in Blue Dojo Graffiti Forums 1.0 allows remote attackers to execute arbitrary SQL commands via the f parameter.

Affected configurations

Nvd

Node

blue_dojograffiti_forumsMatch1.0

VendorProductVersionCPE
blue_dojograffiti_forums1.0cpe:2.3:a:blue_dojo:graffiti_forums:1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
blue_dojo	graffiti_forums	1.0	cpe:2.3:a:blue_dojo:graffiti_forums:1.0:::::::*

References

secunia.com/advisories/21017

securityreason.com/securityalert/1221

www.neosecurityteam.net/index.php?action=advisories&id=24

www.securityfocus.com/archive/1/439605/100/0/threaded

www.securityfocus.com/bid/18928

www.vupen.com/english/advisories/2006/2738

exchange.xforce.ibmcloud.com/vulnerabilities/27634

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.8

Confidence

Low

EPSS

0.011

Percentile

84.7%

JSON

Related for CVE-2006-3560