Lucene search
MitreCVE-2006-3919HistoryJul 28, 2006 - 12:04 a.m.
CVE-2006-3919
2006-07-2800:04:00
mitre
web.nvd.nist.gov
21
sql injection
index.php
sd studio cms
remote attackers
arbitrary commands
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.9
Confidence
Low
EPSS
0.005
Percentile
77.3%
SQL injection vulnerability in index.php in SD Studio CMS allows remote attackers to execute arbitrary SQL commands via the (1) news_id, (2) tid, and (3) page_id parameters.
Affected configurations
Node
sd_studiosd_studio_cms
| Vendor | Product | Version | CPE |
|---|---|---|---|
| sd_studio | sd_studio_cms | * | cpe:2.3:a:sd_studio:sd_studio_cms:*:*:*:*:*:*:*:* |
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.9
Confidence
Low
EPSS
0.005
Percentile
77.3%
Related for CVE-2006-3919