Lucene search
HistoryNov 10, 2006 - 1:07 a.m.
CVE-2006-5837
cve-2006-5837
static code injection
simplechat
iware professional cms
vulnerability
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
Low
0.049 Low
EPSS
Percentile
92.8%
Static code injection vulnerability in chat_panel.php in the SimpleChat 1.0.0 module for iWare Professional CMS allows remote attackers to inject arbitrary PHP code into chat_log.php via the msg parameter.
Affected configurations
Node
simplechatsimplechatMatch1.0.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| simplechat:simplechat | simplechat | eq | 1.0.0 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
Low
0.049 Low
EPSS
Percentile
92.8%
Related for CVE-2006-5837