Lucene search

[email protected]CVE-2006-6354

HistoryDec 07, 2006 - 1:28 a.m.

CVE-2006-6354

2006-12-0701:28:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-6354

sql injection

duware dunews

remote attackers

arbitrary sql commands

8.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

75.6%

JSON

Multiple SQL injection vulnerabilities in detail.asp in DuWare DuNews allow remote attackers to execute arbitrary SQL commands via the (1) iNews, (2) iType, or (3) Action parameter. NOTE: the iType parameter in type.asp is covered by CVE-2005-3976.

CPENameOperatorVersion
duware:dudirectory_pro_sqlduware dudirectory pro sqleq3.1
duware:dudirectory_produware dudirectory proeq3.0
duware:dugalleryduware dugalleryeq3.0
duware:dudownloadduware dudownloadeq1.0
duware:dudirectory_produware dudirectory proeq3.1
duware:dudownloadduware dudownloadeq1.1
duware:duarticleduware duarticleeq1.1
duware:dupaypal_produware dupaypal proeq3.1
duware:dunewsduware dunewseq1.0
duware:duclassifiedduware duclassifiedeq4.1

CPE	Name	Operator	Version
duware:dudirectory_pro_sql	duware dudirectory pro sql	eq	3.1
duware:dudirectory_pro	duware dudirectory pro	eq	3.0
duware:dugallery	duware dugallery	eq	3.0
duware:dudownload	duware dudownload	eq	1.0
duware:dudirectory_pro	duware dudirectory pro	eq	3.1
duware:dudownload	duware dudownload	eq	1.1
duware:duarticle	duware duarticle	eq	1.1
duware:dupaypal_pro	duware dupaypal pro	eq	3.1
duware:dunews	duware dunews	eq	1.0
duware:duclassified	duware duclassified	eq	4.1

Rows per page:

1-10 of 251

References

secunia.com/advisories/23228

securityreason.com/securityalert/1996

www.aria-security.com/forum/showthread.php?t=61

www.securityfocus.com/archive/1/453317/100/0/threaded

www.securityfocus.com/bid/15681

www.vupen.com/english/advisories/2006/4834

exchange.xforce.ibmcloud.com/vulnerabilities/30673

8.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

75.6%

JSON

Related for CVE-2006-6354

nessus1 cve3