Lucene search

K
nvd[email protected]NVD:CVE-2006-0123
HistoryJan 09, 2006 - 11:03 a.m.

CVE-2006-0123

2006-01-0911:03:00
CWE-89
web.nvd.nist.gov
2

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.5

Confidence

Low

EPSS

0.007

Percentile

80.2%

Multiple SQL injection vulnerabilities in ADN Forum 1.0b allow remote attackers to execute arbitrary SQL commands via the (1) fid parameter in index.php and (2) pagid parameter in verpag.php, and possibly other vectors.

Affected configurations

Nvd
Node
adn_forumadn_forumMatch1.0
OR
adn_forumadn_forumMatch1.0b
VendorProductVersionCPE
adn_forumadn_forum1.0cpe:2.3:a:adn_forum:adn_forum:1.0:*:*:*:*:*:*:*
adn_forumadn_forum1.0bcpe:2.3:a:adn_forum:adn_forum:1.0b:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.5

Confidence

Low

EPSS

0.007

Percentile

80.2%

Related for NVD:CVE-2006-0123