Lucene search

K
cve[email protected]CVE-2006-6192
HistoryDec 01, 2006 - 12:28 a.m.

CVE-2006-6192

2006-12-0100:28:00
web.nvd.nist.gov
19
cve-2006-6192
unspecified scripts
admin directory
authentication bypass
remote attackers
unauthorized privileged actions

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.7 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.5%

Unspecified scripts in the admin directory in 8pixel.net SimpleBlog 3.0 and earlier do not properly perform authentication, which allows remote attackers to add users and perform certain other unauthorized privileged actions. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

NVD
Node
8pixel.netsimple_blogMatch2.0
OR
8pixel.netsimple_blogMatch2.1
OR
8pixel.netsimple_blogMatch2.2
OR
8pixel.netsimple_blogMatch2.3
OR
8pixel.netsimple_blogMatch3.0

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.7 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.5%

Related for CVE-2006-6192