Lucene search
HistoryDec 21, 2006 - 1:28 a.m.
CVE-2006-6671
cve-2006-6671
sql injection
burak yylmaz
download portal
security vulnerability
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
Low
0.098 Low
EPSS
Percentile
94.9%
SQL injection vulnerability in down.asp in Burak Yylmaz Download Portal allows remote attackers to execute arbitrary SQL commands via the id parameter.
Affected configurations
Node
maxiaspburak_yilmaz_download_portalMatch0
| CPE | Name | Operator | Version |
|---|---|---|---|
| maxiasp:burak_yilmaz_download_portal | maxiasp burak yilmaz download portal | eq | 0 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
Low
0.098 Low
EPSS
Percentile
94.9%
Related for CVE-2006-6671