Lucene search

[email protected]CVE-2006-4599

HistorySep 07, 2006 - 12:04 a.m.

CVE-2006-4599

2006-09-0700:04:00

[email protected]

web.nvd.nist.gov

cve

2006

4599

sql injection

autentificator

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.7 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.0%

JSON

SQL injection vulnerability in aut_verifica.inc.php in Autentificator 2.01 allows remote attackers to execute arbitrary SQL commands via the user parameter.

Affected configurations

NVD

Node

autentificatorautentificatorMatch2.01

CPENameOperatorVersion
autentificator:autentificatorautentificatoreq2.01

CPE	Name	Operator	Version
autentificator:autentificator	autentificator	eq	2.01

References

secunia.com/advisories/21737

securityreason.com/securityalert/1494

www.securityfocus.com/archive/1/445008/100/0/threaded

www.securityfocus.com/bid/19813

www.vupen.com/english/advisories/2006/3442

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.7 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.0%

JSON

Related for CVE-2006-4599

nvd1 cvelist1