Lucene search

[email protected]CVE-2006-4356

HistoryAug 27, 2006 - 2:04 a.m.

CVE-2006-4356

2006-08-2702:04:00

[email protected]

web.nvd.nist.gov

cve-2006-4356

sql injection

drupal

easylinks

module

nvd

security vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.8 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.5%

JSON

SQL injection vulnerability in Drupal Easylinks Module (easylinks.module) 4.7 before 1.5.2.1 2006/08/19 12:02:27 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected configurations

NVD

Node

drupaldrupal_easylinks_moduleMatch4.7

drupaldrupal_easylinks_moduleMatch4.7.0

drupaldrupal_easylinks_moduleMatch4.7.1

drupaldrupal_easylinks_moduleMatch4.7.2

CPENameOperatorVersion
drupal:drupal_easylinks_moduledrupal drupal easylinks moduleeq4.7
drupal:drupal_easylinks_moduledrupal drupal easylinks moduleeq4.7.0
drupal:drupal_easylinks_moduledrupal drupal easylinks moduleeq4.7.1
drupal:drupal_easylinks_moduledrupal drupal easylinks moduleeq4.7.2

CPE	Name	Operator	Version
drupal:drupal_easylinks_module	drupal drupal easylinks module	eq	4.7
drupal:drupal_easylinks_module	drupal drupal easylinks module	eq	4.7.0
drupal:drupal_easylinks_module	drupal drupal easylinks module	eq	4.7.1
drupal:drupal_easylinks_module	drupal drupal easylinks module	eq	4.7.2

References

drupal.org/node/80087

secunia.com/advisories/21603

www.securityfocus.com/bid/19673

www.vupen.com/english/advisories/2006/3365

exchange.xforce.ibmcloud.com/vulnerabilities/28527

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.8 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.5%

JSON

Related for CVE-2006-4356

cvelist1 nvd1