Lucene search

[email protected]CVE-2006-4043

HistoryAug 09, 2006 - 11:04 p.m.

CVE-2006-4043

2006-08-0923:04:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

index.php

mywebland

mybloggie

sql error

security vulnerability

7.5 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.006 Low

EPSS

Percentile

77.4%

JSON

index.php in myWebland myBloggie 2.1.4 and earlier allows remote attackers to obtain sensitive information via a query that only specifies the viewdate mode, which reveals the table prefix in a SQL error message.

CPENameOperatorVersion
mywebland:mybloggiemywebland mybloggieeq2.1.2
mywebland:mybloggiemywebland mybloggieeq2.1.3_beta
mywebland:mybloggiemywebland mybloggieeq2.1.1
mywebland:mybloggiemywebland mybloggiele2.1.4
mywebland:mybloggiemywebland mybloggieeq2.1.3

CPE	Name	Operator	Version
mywebland:mybloggie	mywebland mybloggie	eq	2.1.2
mywebland:mybloggie	mywebland mybloggie	eq	2.1.3_beta
mywebland:mybloggie	mywebland mybloggie	eq	2.1.1
mywebland:mybloggie	mywebland mybloggie	le	2.1.4
mywebland:mybloggie	mywebland mybloggie	eq	2.1.3

References

retrogod.altervista.org/mybloggie_214_sql.html

secunia.com/advisories/21376

securityreason.com/securityalert/1347

www.securityfocus.com/archive/1/442323/100/0/threaded

www.vupen.com/english/advisories/2006/3179

exchange.xforce.ibmcloud.com/vulnerabilities/28242

www.exploit-db.com/exploits/2118

7.5 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.006 Low

EPSS

Percentile

77.4%

JSON