Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2006-5736
HistoryNov 06, 2006 - 6:07 p.m.

CVE-2006-5736

2006-11-0618:07:00
[email protected]
web.nvd.nist.gov

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

Low

0.054 Low

EPSS

Percentile

93.2%

JSON

SQL injection vulnerability in search.php in PunBB before 1.2.14, when the PHP installation is vulnerable to CVE-2006-3017, allows remote attackers to execute arbitrary SQL commands via the result_list array parameter, which is not initialized.

Affected configurations

NVD
Node
punbbpunbbRange≤1.2.13
OR
punbbpunbbMatch1.0
OR
punbbpunbbMatch1.0.1
OR
punbbpunbbMatch1.0_alpha
OR
punbbpunbbMatch1.0_beta1
OR
punbbpunbbMatch1.0_beta1a
OR
punbbpunbbMatch1.0_beta2
OR
punbbpunbbMatch1.0_beta3
OR
punbbpunbbMatch1.0_rc1
OR
punbbpunbbMatch1.0_rc2
OR
punbbpunbbMatch1.1
OR
punbbpunbbMatch1.1.1
OR
punbbpunbbMatch1.1.2
OR
punbbpunbbMatch1.1.3
OR
punbbpunbbMatch1.1.4
OR
punbbpunbbMatch1.1.5
OR
punbbpunbbMatch1.2
OR
punbbpunbbMatch1.2.1
OR
punbbpunbbMatch1.2.2
OR
punbbpunbbMatch1.2.3
OR
punbbpunbbMatch1.2.4
OR
punbbpunbbMatch1.2.5
OR
punbbpunbbMatch1.2.6
OR
punbbpunbbMatch1.2.7
OR
punbbpunbbMatch1.2.8
OR
punbbpunbbMatch1.2.9
OR
punbbpunbbMatch1.2.10
OR
punbbpunbbMatch1.2.11
OR
punbbpunbbMatch1.2.12

Related

cvelist 13
cve 14
ubuntucve 4
nessus 9
nvd 13
suse 2
prion 4
debiancve 2
redhat 2
centos 2
openvas 3
debian 1
osv 1
ubuntu 1
cvelist
cvelist
CVE-2006-5736
2006-11-06 18:00:00
CVE-2006-3017
2006-06-14 23:00:00
CVE-2007-0233
2007-01-13 02:00:00
cve
cve
CVE-2006-5736
2006-11-06 18:07:00
CVE-2006-3017
2006-06-14 23:02:00
CVE-2006-5116
2006-10-03 04:03:00
ubuntucve
ubuntucve
CVE-2006-3017
2006-06-14 00:00:00
CVE-2007-5416
2007-10-12 00:00:00
CVE-2006-5116
2006-10-03 00:00:00
nessus
nessus
PmWiki < 2.1.21 Global Variables Overwriting
2006-09-06 00:00:00
e107 ibrowser.php zend_has_del() Function Remote Code Execution
2006-09-02 00:00:00
CentOS 3 / 4 : php (CESA-2006:0568)
2006-07-13 00:00:00
nvd
nvd
CVE-2006-3017
2006-06-14 23:02:00
CVE-2006-4467
2006-08-31 20:04:00
CVE-2006-5116
2006-10-03 04:03:00
suse
suse
bug fix in php4
2006-06-22 15:32:39
remote code execution in PHP4,PHP5
2006-06-14 16:37:08
prion
prion
Command injection
2007-10-09 18:17:00
Sql injection
2007-01-13 02:28:00
Command injection
2007-10-12 21:17:00
debiancve
debiancve
CVE-2007-0233
2007-01-13 02:28:00
CVE-2006-5116
2006-10-03 04:03:00
redhat
redhat
(RHSA-2006:0567) php security update
2006-07-25 00:00:00
(RHSA-2006:0568) php security update
2006-07-12 00:00:00
centos
centos
php security update
2006-07-26 22:56:15
php security update
2006-07-12 19:14:58
openvas
openvas
Debian Security Advisory DSA 1206-1 (php4)
2008-01-17 00:00:00
Debian: Security Advisory (DSA-1206-1)
2008-01-17 00:00:00
Ubuntu: Security Advisory (USN-320-1)
2022-08-26 00:00:00
debian
debian
[SECURITY] [DSA 1206-1] New php4 packages fix several vulnerabilities
2006-11-06 18:13:12
osv
osv
php4
2006-11-06 00:00:00
ubuntu
ubuntu
PHP vulnerabilities
2006-07-19 00:00:00

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

Low

0.054 Low

EPSS

Percentile

93.2%

JSON
Related for NVD:CVE-2006-5736
cvelist13cve14ubuntucve4nessus9nvd13suse2prion4debiancve2redhat2centos2openvas3debian1osv1ubuntu1