Lucene search

[email protected]NVD:CVE-2006-6200

HistoryDec 01, 2006 - 1:28 a.m.

CVE-2006-6200

2006-12-0101:28:00

[email protected]

web.nvd.nist.gov

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.5

Confidence

Low

EPSS

0.009

Percentile

82.9%

JSON

Multiple SQL injection vulnerabilities in the (1) rate_article and (2) rate_complete functions in modules/News/index.php in the News module in Francisco Burzi PHP-Nuke 7.9 and earlier, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the sid parameter.

Affected configurations

Nvd

Node

francisco_burziphp-nukeMatch7.0

francisco_burziphp-nukeMatch7.0_final

francisco_burziphp-nukeMatch7.1

francisco_burziphp-nukeMatch7.2

francisco_burziphp-nukeMatch7.3

francisco_burziphp-nukeMatch7.4

francisco_burziphp-nukeMatch7.5

francisco_burziphp-nukeMatch7.6

francisco_burziphp-nukeMatch7.7

francisco_burziphp-nukeMatch7.8

francisco_burziphp-nukeMatch7.8_patched_3.2

francisco_burziphp-nukeMatch7.9

VendorProductVersionCPE
francisco_burziphp-nuke7.0cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*
francisco_burziphp-nuke7.0_finalcpe:2.3:a:francisco_burzi:php-nuke:7.0_final:*:*:*:*:*:*:*
francisco_burziphp-nuke7.1cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*
francisco_burziphp-nuke7.2cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*
francisco_burziphp-nuke7.3cpe:2.3:a:francisco_burzi:php-nuke:7.3:*:*:*:*:*:*:*
francisco_burziphp-nuke7.4cpe:2.3:a:francisco_burzi:php-nuke:7.4:*:*:*:*:*:*:*
francisco_burziphp-nuke7.5cpe:2.3:a:francisco_burzi:php-nuke:7.5:*:*:*:*:*:*:*
francisco_burziphp-nuke7.6cpe:2.3:a:francisco_burzi:php-nuke:7.6:*:*:*:*:*:*:*
francisco_burziphp-nuke7.7cpe:2.3:a:francisco_burzi:php-nuke:7.7:*:*:*:*:*:*:*
francisco_burziphp-nuke7.8cpe:2.3:a:francisco_burzi:php-nuke:7.8:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
francisco_burzi	php-nuke	7.0	cpe:2.3:a:francisco_burzi:php-nuke:7.0:::::::*
francisco_burzi	php-nuke	7.0_final	cpe:2.3:a:francisco_burzi:php-nuke:7.0_final:::::::*
francisco_burzi	php-nuke	7.1	cpe:2.3:a:francisco_burzi:php-nuke:7.1:::::::*
francisco_burzi	php-nuke	7.2	cpe:2.3:a:francisco_burzi:php-nuke:7.2:::::::*
francisco_burzi	php-nuke	7.3	cpe:2.3:a:francisco_burzi:php-nuke:7.3:::::::*
francisco_burzi	php-nuke	7.4	cpe:2.3:a:francisco_burzi:php-nuke:7.4:::::::*
francisco_burzi	php-nuke	7.5	cpe:2.3:a:francisco_burzi:php-nuke:7.5:::::::*
francisco_burzi	php-nuke	7.6	cpe:2.3:a:francisco_burzi:php-nuke:7.6:::::::*
francisco_burzi	php-nuke	7.7	cpe:2.3:a:francisco_burzi:php-nuke:7.7:::::::*
francisco_burzi	php-nuke	7.8	cpe:2.3:a:francisco_burzi:php-nuke:7.8:::::::*

Rows per page:

1-10 of 121

References

secunia.com/advisories/23128

securityreason.com/securityalert/1935

securitytracker.com/id?1017282

www.neosecurityteam.net/index.php?action=advisories&id=30

www.securityfocus.com/archive/1/452553/100/0/threaded

www.securityfocus.com/bid/21277

www.vupen.com/english/advisories/2006/4739

exchange.xforce.ibmcloud.com/vulnerabilities/30525

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.5

Confidence

Low

EPSS

0.009

Percentile

82.9%

JSON

Related for NVD:CVE-2006-6200

cve1 cvelist1