Lucene search

[email protected]CVE-2006-3832

HistoryJul 25, 2006 - 1:22 p.m.

CVE-2006-3832

2006-07-2513:22:00

[email protected]

web.nvd.nist.gov

sql injection

gerrit van aaken loudblog

cve-2006-3832

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.4 High

AI Score

Confidence

Low

0.111 Low

EPSS

Percentile

95.2%

JSON

SQL injection vulnerability in index.php in Gerrit van Aaken Loudblog 0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected configurations

NVD

Node

gerrit_van_aakenloudblogMatch0.1

gerrit_van_aakenloudblogMatch0.2

gerrit_van_aakenloudblogMatch0.3

gerrit_van_aakenloudblogMatch0.4

gerrit_van_aakenloudblogMatch0.5

gerrit_van_aakenloudblogMatch0.41

gerrit_van_aakenloudblogMatch0.42

gerrit_van_aakenloudblogMatch0.43

gerrit_van_aakenloudblogMatch0.44

CPENameOperatorVersion
gerrit_van_aaken:loudbloggerrit van aaken loudblogeq0.1
gerrit_van_aaken:loudbloggerrit van aaken loudblogeq0.2
gerrit_van_aaken:loudbloggerrit van aaken loudblogeq0.3
gerrit_van_aaken:loudbloggerrit van aaken loudblogeq0.4
gerrit_van_aaken:loudbloggerrit van aaken loudblogeq0.5
gerrit_van_aaken:loudbloggerrit van aaken loudblogeq0.41
gerrit_van_aaken:loudbloggerrit van aaken loudblogeq0.42
gerrit_van_aaken:loudbloggerrit van aaken loudblogeq0.43
gerrit_van_aaken:loudbloggerrit van aaken loudblogeq0.44

CPE	Name	Operator	Version
gerrit_van_aaken:loudblog	gerrit van aaken loudblog	eq	0.1
gerrit_van_aaken:loudblog	gerrit van aaken loudblog	eq	0.2
gerrit_van_aaken:loudblog	gerrit van aaken loudblog	eq	0.3
gerrit_van_aaken:loudblog	gerrit van aaken loudblog	eq	0.4
gerrit_van_aaken:loudblog	gerrit van aaken loudblog	eq	0.5
gerrit_van_aaken:loudblog	gerrit van aaken loudblog	eq	0.41
gerrit_van_aaken:loudblog	gerrit van aaken loudblog	eq	0.42
gerrit_van_aaken:loudblog	gerrit van aaken loudblog	eq	0.43
gerrit_van_aaken:loudblog	gerrit van aaken loudblog	eq	0.44

References

loudblog.de/forum/viewtopic.php?id=762

loudblog.de/forum/viewtopic.php?id=770

retrogod.altervista.org/loudblog_05_sql.html

secunia.com/advisories/21157

securityreason.com/securityalert/1274

www.osvdb.org/27442

www.securityfocus.com/archive/1/440763/100/0/threaded

www.vupen.com/english/advisories/2006/2934

exchange.xforce.ibmcloud.com/vulnerabilities/27896

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.4 High

AI Score

Confidence

Low

0.111 Low

EPSS

Percentile

95.2%

JSON

Related for CVE-2006-3832

nessus1 cvelist1 nvd1