Lucene search
HistorySep 23, 2006 - 10:07 a.m.
CVE-2006-4957
cve-2006-4957
sql injection
getmember function
functions.php
myreview 1.9.4
remote attackers
arbitrary sql commands
email parameter
admin.php
nvd
8.7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.006 Low
EPSS
Percentile
77.7%
SQL injection vulnerability in the GetMember function in functions.php in MyReview 1.9.4 allows remote attackers to execute arbitrary SQL commands via the email parameter to Admin.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| the_myreview_system:myreview | the myreview system myreview | eq | 1.9.4 |
8.7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.006 Low
EPSS
Percentile
77.7%
Related for CVE-2006-4957