Lucene search

[email protected]CVE-2006-6269

HistoryDec 04, 2006 - 11:28 a.m.

CVE-2006-6269

2006-12-0411:28:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-6269

sql injection

infinitytechs restaurants cm

security vulnerability

9.5 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

56.3%

JSON

Multiple SQL injection vulnerabilities in Infinitytechs Restaurants CM allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in rating.asp, (2) the mealid parameter in meal_rest.asp, and (3) the resid parameter in res_details.asp.

CPENameOperatorVersion
infinity_technologies:infinitytechs_restaurants_cminfinity technologies infinitytechs restaurants cmeq*

CPE	Name	Operator	Version
infinity_technologies:infinitytechs_restaurants_cm	infinity technologies infinitytechs restaurants cm	eq	*

References

securityreason.com/securityalert/1981

www.securityfocus.com/archive/1/451970/100/200/threaded

9.5 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

56.3%

JSON