Lucene search
HistoryDec 27, 2006 - 2:28 a.m.
CVE-2006-6766
cve
2006
6766
sql injection
cwmexplorer
remote attackers
arbitrary sql commands
security vulnerability
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.7 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
51.3%
Multiple SQL injection vulnerabilities in cwmExplorer 1.1.0 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: The provenance of this information is unknown; details are obtained solely from third party information.
Affected configurations
Node
cwm-designcwmexplorerRange≤1.1
ORcwm-designcwmexplorerMatch1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| cwm-design:cwmexplorer | cwm-design cwmexplorer | le | 1.1 |
| cwm-design:cwmexplorer | cwm-design cwmexplorer | eq | 1.0 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.7 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
51.3%
Related for CVE-2006-6766