Lucene search
MitreCVE-2006-7116HistoryMar 06, 2007 - 1:19 a.m.
CVE-2006-7116
2007-03-0601:19:00
CWE-89
mitre
web.nvd.nist.gov
22
cve
2006
7116
sql injection
vulnerability
kubix 0.7
remote attackers
authentication
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
9
Confidence
Low
EPSS
0.011
Percentile
84.6%
SQL injection vulnerability in includes/functions.php in Kubix 0.7 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via the member_id parameter ($id variable) to index.php.
Affected configurations
Node
kubixkubixRange≤0.7
Related
cvelist
cvelist
CVE-2006-7116
2007-03-06 01:00:00
nvd
nvd
CVE-2006-7116
2007-03-06 01:19:00
exploitdb
exploitdb
kubix 0.7 - Multiple Vulnerabilities
2006-11-29 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
9
Confidence
Low
EPSS
0.011
Percentile
84.6%
Related for CVE-2006-7116