Lucene search
HistoryOct 30, 2006 - 11:07 p.m.
CVE-2006-5608
cve-2006-5608
sql injection
extended tracker
drupal
remote code execution
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.7 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
77.4%
SQL injection vulnerability in Extended Tracker (xtracker) 4.7 before 1.5.2.1 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to “parameters from URLs.”
Affected configurations
Node
drupalextended_trackerMatch4.7
| CPE | Name | Operator | Version |
|---|---|---|---|
| drupal:extended_tracker | drupal extended tracker | eq | 4.7 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.7 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
77.4%
Related for CVE-2006-5608