Lucene search

K
cveMitreCVE-2006-7145
HistoryMar 07, 2007 - 8:19 p.m.

CVE-2006-7145

2007-03-0720:19:00
mitre
web.nvd.nist.gov
23
cve-2006-7145
call center software
information security
remote attackers
sensitive information

CVSS2

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:P/A:N

AI Score

6.5

Confidence

Low

EPSS

0.003

Percentile

66.2%

edit_user.php in Call Center Software 0.93 and earlier allows remote attackers to obtain sensitive information such as account passwords via a modified user_id parameter.

Affected configurations

Nvd
Node
call-center-softwarecall-center-softwareRange0.93
VendorProductVersionCPE
call-center-softwarecall-center-software*cpe:2.3:a:call-center-software:call-center-software:*:*:*:*:*:*:*:*

CVSS2

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:P/A:N

AI Score

6.5

Confidence

Low

EPSS

0.003

Percentile

66.2%

Related for CVE-2006-7145