Lucene search

K
cve[email protected]CVE-2006-6343
HistoryDec 07, 2006 - 1:28 a.m.

CVE-2006-6343

2006-12-0701:28:00
web.nvd.nist.gov
21
cve-2006-6343
sql injection
neocrome seditio
polls.php
remote execution

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.4 High

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.7%

SQL injection vulnerability in polls.php in Neocrome Seditio 1.10 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected configurations

NVD
Node
neocromeseditioRange1.10
CPENameOperatorVersion
neocrome:seditioneocrome seditiole1.10

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.4 High

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.7%

Related for CVE-2006-6343