Lucene search

[email protected]CVE-2006-5107

HistoryOct 03, 2006 - 4:03 a.m.

CVE-2006-5107

2006-10-0304:03:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve

2006

5107

sql injection

devellion

cubecart

vulnerability

security

remote attackers

nvd

9.5 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

60.8%

JSON

Multiple SQL injection vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to execute arbitrary SQL commands via (1) the user_name parameter in admin/forgot_pass.php, (2) the order_id parameter in view_order.php, (3) the view_doc parameter in view_doc.php, and (4) the order_id parameter in admin/print_order.php.

CPENameOperatorVersion
devellion:cubecartdevellion cubecarteq2.0.3
devellion:cubecartdevellion cubecarteq2.0.4
devellion:cubecartdevellion cubecarteq2.0.1
devellion:cubecartdevellion cubecarteq2.0.2
devellion:cubecartdevellion cubecarteq2.0.5
devellion:cubecartdevellion cubecarteq2.0.6
devellion:cubecartdevellion cubecarteq2.0.0

CPE	Name	Operator	Version
devellion:cubecart	devellion cubecart	eq	2.0.3
devellion:cubecart	devellion cubecart	eq	2.0.4
devellion:cubecart	devellion cubecart	eq	2.0.1
devellion:cubecart	devellion cubecart	eq	2.0.2
devellion:cubecart	devellion cubecart	eq	2.0.5
devellion:cubecart	devellion cubecart	eq	2.0.6
devellion:cubecart	devellion cubecart	eq	2.0.0

References

securityreason.com/securityalert/1662

www.securityfocus.com/archive/1/447009/100/0/threaded

www.securityfocus.com/bid/20215

exchange.xforce.ibmcloud.com/vulnerabilities/29176

9.5 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

60.8%

JSON