Lucene search

FlexeraCVE-2006-4575

HistoryJan 03, 2007 - 8:00 p.m.

CVE-2006-4575

2007-01-0320:00:00

flexera

web.nvd.nist.gov

cve-2006-4575

address book 1.04e

sql injection

remote attack

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.9

Confidence

Low

EPSS

0.005

Percentile

77.5%

JSON

Multiple SQL injection vulnerabilities in The Address Book 1.04e allow remote attackers to execute arbitrary SQL commands via the (1) lastname, (2) firstname, (3) passwordOld, (4) passwordNew, (5) id, (6) language, (7) defaultLetter, (8) newuserPass, (9) newuserType, (10) newuserEmail parameters in (a) user.php; the (11) goTo and (12) search parameters in (b) search.php; and the (13) groupAddName parameter in © save.php.

Affected configurations

Nvd

Node

the_address_bookthe_address_bookMatch1.04e

VendorProductVersionCPE
the_address_bookthe_address_book1.04ecpe:2.3:a:the_address_book:the_address_book:1.04e:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
the_address_book	the_address_book	1.04e	cpe:2.3:a:the_address_book:the_address_book:1.04e:::::::*

References

osvdb.org/32568

osvdb.org/32569

osvdb.org/32570

secunia.com/advisories/21694

secunia.com/secunia_research/2006-76/advisory/

www.securityfocus.com/bid/21870

exchange.xforce.ibmcloud.com/vulnerabilities/31238

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.9

Confidence

Low

EPSS

0.005

Percentile

77.5%

JSON

Related for CVE-2006-4575