Lucene search

[email protected]CVE-2006-6190

HistoryDec 01, 2006 - 12:28 a.m.

CVE-2006-6190

2006-12-0100:28:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-6190

sql injection

anna.pl

anna^ irc bot

caprice

remote execution

9.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

81.1%

JSON

SQL injection vulnerability in anna.pl in Anna^ IRC Bot before 0.30 (aka caprice) allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: it is possible that there are multiple issues.

CPENameOperatorVersion
anna_irc_bot:anna\^_irc_botanna irc bot anna\^ irc boteq0.20
anna_irc_bot:anna\^_irc_botanna irc bot anna\^ irc boteq0.10

CPE	Name	Operator	Version
anna_irc_bot:anna\^_irc_bot	anna irc bot anna\^ irc bot	eq	0.20
anna_irc_bot:anna\^_irc_bot	anna irc bot anna\^ irc bot	eq	0.10

References

anna.svn.sourceforge.net/viewvc/anna/branches/0.30/anna.pl?r1=22&r2=23

secunia.com/advisories/23200

sourceforge.net/project/shownotes.php?release_id=466517

www.securityfocus.com/bid/21312

www.vupen.com/english/advisories/2006/4708

9.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

81.1%

JSON