Lucene search

[email protected]CVE-2006-5322

HistoryOct 17, 2006 - 5:07 p.m.

CVE-2006-5322

2006-10-1717:07:00

[email protected]

web.nvd.nist.gov

cve-2006-5322

sql injection

phplist

security vulnerability

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.9 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.1%

JSON

Multiple SQL injection vulnerabilities in phplist before 2.10.3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected configurations

NVD

Node

tincanphplistRange≤2.10.2

tincanphplistMatch2.8.12

tincanphplistMatch2.9.3

tincanphplistMatch2.9.4

tincanphplistMatch2.9.5

tincanphplistMatch2.10.1

CPENameOperatorVersion
tincan:phplisttincan phplistle2.10.2
tincan:phplisttincan phplisteq2.8.12
tincan:phplisttincan phplisteq2.9.3
tincan:phplisttincan phplisteq2.9.4
tincan:phplisttincan phplisteq2.9.5
tincan:phplisttincan phplisteq2.10.1

CPE	Name	Operator	Version
tincan:phplist	tincan phplist	le	2.10.2
tincan:phplist	tincan phplist	eq	2.8.12
tincan:phplist	tincan phplist	eq	2.9.3
tincan:phplist	tincan phplist	eq	2.9.4
tincan:phplist	tincan phplist	eq	2.9.5
tincan:phplist	tincan phplist	eq	2.10.1

References

tincan.co.uk/?lid=1821

www.phplist.com/news

exchange.xforce.ibmcloud.com/vulnerabilities/29637

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.9 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.1%

JSON

Related for CVE-2006-5322

nvd1 cvelist1