Lucene search

[email protected]CVE-2006-7025

HistoryFeb 23, 2007 - 3:28 a.m.

CVE-2006-7025

2007-02-2303:28:00

CWE-89

[email protected]

web.nvd.nist.gov

cve

2006

7025

sql injection

admin

config.php

bookmark4u 2.0

bookmark4u 2.1

8.1 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

73.4%

JSON

SQL injection vulnerability in admin/config.php in Bookmark4U 2.0 and 2.1 allows remote attackers to inject arbitrary SQL command via the sqlcmd parameter.

CPENameOperatorVersion
sangwan_kim:bookmark4usangwan kim bookmark4ule2.1

CPE	Name	Operator	Version
sangwan_kim:bookmark4u	sangwan kim bookmark4u	le	2.1

References

marc.info/?l=full-disclosure&m=114555163911635&w=2

secunia.com/advisories/19758

www.attrition.org/pipermail/vim/2007-February/001373.html

www.osvdb.org/24795

www.vupen.com/english/advisories/2006/1456

exchange.xforce.ibmcloud.com/vulnerabilities/25956

8.1 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

73.4%

JSON

Related for CVE-2006-7025

securityvulns1