Lucene search

MitreCVE-2006-6161

HistoryNov 28, 2006 - 11:28 p.m.

CVE-2006-6161

2006-11-2823:28:00

mitre

web.nvd.nist.gov

cve-2006-6161

sql injection

doug luxem liberum help desk

security vulnerability

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.7

Confidence

Low

EPSS

0.002

Percentile

60.4%

JSON

Multiple SQL injection vulnerabilities in Doug Luxem Liberum Help Desk 0.97.3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) uid parameter to (a) inout/status.asp, (b) inout/update.asp, and © forgotpass.asp. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

Nvd

Node

doug_luxemliberum_help_deskRange≤0.97.3

VendorProductVersionCPE
doug_luxemliberum_help_desk*cpe:2.3:a:doug_luxem:liberum_help_desk:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
doug_luxem	liberum_help_desk	*	cpe:2.3:a:doug_luxem:liberum_help_desk::::::::

References

www.securityfocus.com/bid/32884

www.vupen.com/english/advisories/2006/4704

exchange.xforce.ibmcloud.com/vulnerabilities/47420

www.exploit-db.com/exploits/7493

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.7

Confidence

Low

EPSS

0.002

Percentile

60.4%

JSON

Related for CVE-2006-6161