Lucene search

[email protected]NVD:CVE-2006-3275

HistoryJun 28, 2006 - 10:05 p.m.

CVE-2006-3275

2006-06-2822:05:00

[email protected]

web.nvd.nist.gov

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.006

Percentile

79.5%

JSON

SQL injection vulnerability in profile.php in YaBB SE 1.5.5 and earlier allows remote attackers to execute SQL commands via a double-encoded user parameter in a viewprofile action.

Affected configurations

Nvd

Node

yabbyabbRange≤1.5.5second_edition

yabbyabbMatch1.5.1second_edition

yabbyabbMatch1.5.2second_edition

yabbyabbMatch1.5.4second_edition

VendorProductVersionCPE
yabbyabb*cpe:2.3:a:yabb:yabb:*:*:second_edition:*:*:*:*:*
yabbyabb1.5.1cpe:2.3:a:yabb:yabb:1.5.1:*:second_edition:*:*:*:*:*
yabbyabb1.5.2cpe:2.3:a:yabb:yabb:1.5.2:*:second_edition:*:*:*:*:*
yabbyabb1.5.4cpe:2.3:a:yabb:yabb:1.5.4:*:second_edition:*:*:*:*:*

Vendor	Product	Version	CPE
yabb	yabb	*	cpe:2.3:a:yabb:yabb:::second_edition:::::*
yabb	yabb	1.5.1	cpe:2.3:a:yabb:yabb:1.5.1::second_edition:::::
yabb	yabb	1.5.2	cpe:2.3:a:yabb:yabb:1.5.2::second_edition:::::
yabb	yabb	1.5.4	cpe:2.3:a:yabb:yabb:1.5.4::second_edition:::::

References

marc.info/?l=full-disclosure&m=115102378824221&w=2

secunia.com/advisories/20780

www.securityfocus.com/bid/18625

www.vupen.com/english/advisories/2006/2504

exchange.xforce.ibmcloud.com/vulnerabilities/27331

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.006

Percentile

79.5%

JSON

Related for NVD:CVE-2006-3275

cve1 cvelist1