Lucene search
HistoryNov 21, 2006 - 11:07 p.m.
CVE-2006-6021
cve-2006-6021
sql injection
bestwebapp
dating site
remote attackers
arbitrary sql commands
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.4 High
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
81.5%
SQL injection vulnerability in the login component in BestWebApp Dating Site allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) passwd parameters.
Affected configurations
Node
bestwebappbestwebapp_dating_site
| CPE | Name | Operator | Version |
|---|---|---|---|
| bestwebapp:bestwebapp_dating_site | bestwebapp bestwebapp dating site | eq | * |
Related
cvelist
cvelist
CVE-2006-6021
2006-11-21 23:00:00
CVE-2007-6671
2008-01-08 11:00:00
nvd
nvd
CVE-2006-6021
2006-11-21 23:07:00
CVE-2007-6671
2008-01-08 11:46:00
prion
prion
Sql injection
2008-01-08 11:46:00
cve
cve
CVE-2007-6671
2008-01-08 11:46:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.4 High
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
81.5%
Related for CVE-2006-6021