Lucene search
HistoryMar 07, 2007 - 8:19 p.m.
CVE-2006-7150
cve-2006-7150
mambo
sql injection
vulnerability
nvd
8.5 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.006 Low
EPSS
Percentile
78.5%
Multiple SQL injection vulnerabilities in Mambo 4.6.x allow remote attackers to execute arbitrary SQL commands via the mcname parameter to (1) moscomment.php and (2) com_comment.php.
Affected configurations
Node
mambomambo_open_sourceMatch4.6cvs
ORmambomambo_open_sourceMatch4.6rc1
ORmambomambo_open_sourceMatch4.6rc2
ORmambomambo_open_sourceMatch4.6.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| mambo:mambo_open_source | mambo mambo open source | eq | 4.6 |
| mambo:mambo_open_source | mambo mambo open source | eq | 4.6.1 |
Related
nvd
nvd
CVE-2006-7150
2007-03-07 20:19:00
cvelist
cvelist
CVE-2006-7150
2007-03-07 20:00:00
openvas
openvas
FreeBSD Ports: mambo
2008-09-04 00:00:00
FreeBSD Ports: mambo
2008-09-04 00:00:00
8.5 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.006 Low
EPSS
Percentile
78.5%
Related for CVE-2006-7150