Lucene search
HistoryJul 18, 2006 - 3:46 p.m.
CVE-2006-3610
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.5
Confidence
Low
EPSS
0.004
Percentile
74.5%
index.php in Orbitcoders OrbitMATRIX 1.0 allows remote attackers to obtain sensitive information (partial database schema) via a modified page_name parameter, which reflects portions of an SQL query in the result. NOTE: it is not clear whether the information is target-specific. If not, then this issue is not an exposure.
Affected configurations
Node
orbitcodersorbitmatrixMatch1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| orbitcoders | orbitmatrix | 1.0 | cpe:2.3:a:orbitcoders:orbitmatrix:1.0:*:*:*:*:*:*:* |
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.5
Confidence
Low
EPSS
0.004
Percentile
74.5%
Related for NVD:CVE-2006-3610