Lucene search
HistoryMar 06, 2007 - 1:19 a.m.
CVE-2006-7126
cve-2006-7126
sql injection
joomla
bsq sitestats
remote code execution
nvd
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
81.0%
SQL injection vulnerability in Joomla BSQ Sitestats 1.8.0 and 2.2.1 allows remote attackers to execute arbitrary SQL commands via the query string, possibly PHP_SELF.
Affected configurations
Node
joomlabsq_sitestatsMatch1.8.0
ORjoomlabsq_sitestatsMatch2.1.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| joomla:bsq_sitestats | joomla bsq sitestats | eq | 1.8.0 |
| joomla:bsq_sitestats | joomla bsq sitestats | eq | 2.1.1 |
References
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
81.0%
Related for CVE-2006-7126