Lucene search

MitreCVE-2006-5635

HistoryNov 01, 2006 - 12:07 a.m.

CVE-2006-5635

2006-11-0100:07:00

mitre

web.nvd.nist.gov

sql injection

vulnerability

forum

web wiz forums

remote attackers

sql commands

kw parameter

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.8

Confidence

Low

EPSS

0.002

Percentile

55.6%

JSON

SQL injection vulnerability in forum/search.asp in Web Wiz Forums allows remote attackers to execute arbitrary SQL commands via the KW parameter.

Affected configurations

Nvd

Node

web_wiz_forumsweb_wiz_forumsMatch6.34

web_wiz_forumsweb_wiz_forumsMatch7.0

web_wiz_forumsweb_wiz_forumsMatch7.0.1

web_wiz_forumsweb_wiz_forumsMatch7.0_beta1

web_wiz_forumsweb_wiz_forumsMatch7.5

web_wiz_forumsweb_wiz_forumsMatch7.7a

web_wiz_forumsweb_wiz_forumsMatch7.7b

web_wiz_forumsweb_wiz_forumsMatch7.8

web_wiz_forumsweb_wiz_forumsMatch7.9

web_wiz_forumsweb_wiz_forumsMatch7.51

web_wiz_forumsweb_wiz_forumsMatch7.91

web_wiz_forumsweb_wiz_forumsMatch8.0_alpha

web_wiz_forumsweb_wiz_forumsMatch8.04

VendorProductVersionCPE
web_wiz_forumsweb_wiz_forums6.34cpe:2.3:a:web_wiz_forums:web_wiz_forums:6.34:*:*:*:*:*:*:*
web_wiz_forumsweb_wiz_forums7.0cpe:2.3:a:web_wiz_forums:web_wiz_forums:7.0:*:*:*:*:*:*:*
web_wiz_forumsweb_wiz_forums7.0.1cpe:2.3:a:web_wiz_forums:web_wiz_forums:7.0.1:*:*:*:*:*:*:*
web_wiz_forumsweb_wiz_forums7.0_beta1cpe:2.3:a:web_wiz_forums:web_wiz_forums:7.0_beta1:*:*:*:*:*:*:*
web_wiz_forumsweb_wiz_forums7.5cpe:2.3:a:web_wiz_forums:web_wiz_forums:7.5:*:*:*:*:*:*:*
web_wiz_forumsweb_wiz_forums7.7acpe:2.3:a:web_wiz_forums:web_wiz_forums:7.7a:*:*:*:*:*:*:*
web_wiz_forumsweb_wiz_forums7.7bcpe:2.3:a:web_wiz_forums:web_wiz_forums:7.7b:*:*:*:*:*:*:*
web_wiz_forumsweb_wiz_forums7.8cpe:2.3:a:web_wiz_forums:web_wiz_forums:7.8:*:*:*:*:*:*:*
web_wiz_forumsweb_wiz_forums7.9cpe:2.3:a:web_wiz_forums:web_wiz_forums:7.9:*:*:*:*:*:*:*
web_wiz_forumsweb_wiz_forums7.51cpe:2.3:a:web_wiz_forums:web_wiz_forums:7.51:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
web_wiz_forums	web_wiz_forums	6.34	cpe:2.3:a:web_wiz_forums:web_wiz_forums:6.34:::::::*
web_wiz_forums	web_wiz_forums	7.0	cpe:2.3:a:web_wiz_forums:web_wiz_forums:7.0:::::::*
web_wiz_forums	web_wiz_forums	7.0.1	cpe:2.3:a:web_wiz_forums:web_wiz_forums:7.0.1:::::::*
web_wiz_forums	web_wiz_forums	7.0_beta1	cpe:2.3:a:web_wiz_forums:web_wiz_forums:7.0_beta1:::::::*
web_wiz_forums	web_wiz_forums	7.5	cpe:2.3:a:web_wiz_forums:web_wiz_forums:7.5:::::::*
web_wiz_forums	web_wiz_forums	7.7a	cpe:2.3:a:web_wiz_forums:web_wiz_forums:7.7a:::::::*
web_wiz_forums	web_wiz_forums	7.7b	cpe:2.3:a:web_wiz_forums:web_wiz_forums:7.7b:::::::*
web_wiz_forums	web_wiz_forums	7.8	cpe:2.3:a:web_wiz_forums:web_wiz_forums:7.8:::::::*
web_wiz_forums	web_wiz_forums	7.9	cpe:2.3:a:web_wiz_forums:web_wiz_forums:7.9:::::::*
web_wiz_forums	web_wiz_forums	7.51	cpe:2.3:a:web_wiz_forums:web_wiz_forums:7.51:::::::*

Rows per page:

1-10 of 131

References

securityreason.com/securityalert/1801

www.securityfocus.com/archive/1/450034/100/0/threaded

www.securityfocus.com/bid/20778

exchange.xforce.ibmcloud.com/vulnerabilities/29898

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.8

Confidence

Low

EPSS

0.002

Percentile

55.6%

JSON

Related for CVE-2006-5635