Lucene search

[email protected]CVE-2006-7088

HistoryMar 02, 2007 - 9:18 p.m.

CVE-2006-7088

2007-03-0221:18:00

[email protected]

web.nvd.nist.gov

cve

sql injection

simple php forum

remote attackers

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

58.7%

JSON

Multiple SQL injection vulnerabilities in Simple PHP Forum before 0.4 allow remote attackers to execute arbitrary SQL commands via the username parameter to (1) logon_user.php and (2) update_profile.php.

Affected configurations

NVD

Node

simple_php_forumsimple_php_forumMatch0.1

simple_php_forumsimple_php_forumMatch0.2

simple_php_forumsimple_php_forumMatch0.3

CPENameOperatorVersion
simple_php_forum:simple_php_forumsimple php forumeq0.1
simple_php_forum:simple_php_forumsimple php forumeq0.2
simple_php_forum:simple_php_forumsimple php forumeq0.3

CPE	Name	Operator	Version
simple_php_forum:simple_php_forum	simple php forum	eq	0.1
simple_php_forum:simple_php_forum	simple php forum	eq	0.2
simple_php_forum:simple_php_forum	simple php forum	eq	0.3

References

sourceforge.net/project/shownotes.php?release_id=462654

www.vupen.com/english/advisories/2006/4496

exchange.xforce.ibmcloud.com/vulnerabilities/30252

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

58.7%

JSON

Related for CVE-2006-7088

cvelist1 nvd1