Lucene search

K
cve[email protected]CVE-2006-4756
HistorySep 13, 2006 - 10:07 p.m.

CVE-2006-4756

2006-09-1322:07:00
CWE-89
web.nvd.nist.gov
22
sql injection
phpmydirectory
vulnerability
remote attackers
nvd
cve-2006-4756

8.5 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

55.8%

SQL injection vulnerability in alpha.php in phpMyDirectory 10.4.6 and earlier allows remote attackers to execute arbitrary SQL commands via the letter parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.

Affected configurations

NVD
Node
accomplishtechnologyphpmydirectoryRange10.4.6
OR
accomplishtechnologyphpmydirectoryMatch1.0
OR
accomplishtechnologyphpmydirectoryMatch1.0.1
OR
accomplishtechnologyphpmydirectoryMatch1.0.2
OR
accomplishtechnologyphpmydirectoryMatch1.0.3
OR
accomplishtechnologyphpmydirectoryMatch1.0.4
OR
accomplishtechnologyphpmydirectoryMatch1.0.5
OR
accomplishtechnologyphpmydirectoryMatch1.0.6
OR
accomplishtechnologyphpmydirectoryMatch1.0.7
OR
accomplishtechnologyphpmydirectoryMatch1.0.8
OR
accomplishtechnologyphpmydirectoryMatch1.0.9
OR
accomplishtechnologyphpmydirectoryMatch1.1.0
OR
accomplishtechnologyphpmydirectoryMatch1.1.1
OR
accomplishtechnologyphpmydirectoryMatch1.1.2
OR
accomplishtechnologyphpmydirectoryMatch1.1.3
OR
accomplishtechnologyphpmydirectoryMatch1.1.4
OR
accomplishtechnologyphpmydirectoryMatch1.1.5
OR
accomplishtechnologyphpmydirectoryMatch1.1.6
OR
accomplishtechnologyphpmydirectoryMatch1.1.7
OR
accomplishtechnologyphpmydirectoryMatch1.1.8
OR
accomplishtechnologyphpmydirectoryMatch1.1.9
OR
accomplishtechnologyphpmydirectoryMatch1.2.0
OR
accomplishtechnologyphpmydirectoryMatch1.2.0b
OR
accomplishtechnologyphpmydirectoryMatch1.2.1
OR
accomplishtechnologyphpmydirectoryMatch1.3.0
OR
accomplishtechnologyphpmydirectoryMatch1.3.0b
OR
accomplishtechnologyphpmydirectoryMatch1.3.1
OR
accomplishtechnologyphpmydirectoryMatch1.3.2
OR
accomplishtechnologyphpmydirectoryMatch1.3.3
OR
accomplishtechnologyphpmydirectoryMatch1.3.4
OR
accomplishtechnologyphpmydirectoryMatch1.3.5
OR
accomplishtechnologyphpmydirectoryMatch1.4.0
OR
accomplishtechnologyphpmydirectoryMatch1.4.1
OR
accomplishtechnologyphpmydirectoryMatch10.1.3
OR
accomplishtechnologyphpmydirectoryMatch10.4.4
OR
accomplishtechnologyphpmydirectoryMatch10.4.5

8.5 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

55.8%

Related for CVE-2006-4756