Lucene search
HistoryNov 28, 2006 - 11:28 p.m.
CVE-2006-6147
sql injection
jiros links manager
remote attackers
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.9 High
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
79.7%
Multiple SQL injection vulnerabilities in JiRos Links Manager allow remote attackers to execute arbitrary SQL commands via the (1) LinkID parameter to openlink.asp or the (2) CategoryID parameter to viewlinks.asp.
Affected configurations
Node
jiroslinks_managerMatch1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| jiros:links_manager | jiros links manager | eq | 1.0 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.9 High
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
79.7%
Related for CVE-2006-6147