Lucene search

K
cve[email protected]CVE-2006-7057
HistoryFeb 24, 2007 - 1:28 a.m.

CVE-2006-7057

2007-02-2401:28:00
web.nvd.nist.gov
22
cve-2006-7057
sphider
sql injection
search.php
remote attackers
arbitrary commands

7.9 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.035 Low

EPSS

Percentile

91.5%

SQL injection vulnerability in search.php in Sphider before 1.3.1c allows remote attackers to execute arbitrary SQL commands via the category parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this issue might be primary to CVE-2006-2506.2.

Affected configurations

NVD
Node
sphidersphiderRange1.3b
CPENameOperatorVersion
sphider:sphidersphiderle1.3b

7.9 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.035 Low

EPSS

Percentile

91.5%

Related for CVE-2006-7057