Lucene search
MitreCVE-2006-5926HistoryNov 16, 2006 - 12:07 a.m.
CVE-2006-5926
2006-11-1600:07:00
mitre
web.nvd.nist.gov
20
cve-2006-5926
sql injection
mail.php
vallheru
remote attackers
arbitrary sql commands
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.9
Confidence
Low
EPSS
0.006
Percentile
78.0%
Multiple SQL injection vulnerabilities in mail.php in Vallheru before 1.0.7 allow remote attackers to execute arbitrary SQL commands via the (1) id or (2) to parameters. NOTE: some of these details are obtained from third party information.
Affected configurations
Node
vallheruvallheruMatch1.0.6
References
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.9
Confidence
Low
EPSS
0.006
Percentile
78.0%
Related for CVE-2006-5926