Lucene search

PRIOn knowledge basePRION:CVE-2006-1123

HistoryMar 09, 2006 - 9:02 p.m.

Sql injection

2006-03-0921:02:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.079 Low

EPSS

Percentile

94.1%

JSON

SQL injection vulnerability in D2KBlog 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the memName parameter in a cookie.

CPENameOperatorVersion
d2kblogeq1.0.1
d2kblogeq1.0
d2kblogeq1.0.3
d2kblogeq1.0.2

Name	Operator	Version
d2kblog	eq	1.0.1
d2kblog	eq	1.0
d2kblog	eq	1.0.3
d2kblog	eq	1.0.2

References

secunia.com/advisories/19177

securityreason.com/securityalert/559

www.osvdb.org/23770

www.securityfocus.com/archive/1/427103/100/0/threaded

www.securityfocus.com/bid/17035

www.vupen.com/english/advisories/2006/0896

exchange.xforce.ibmcloud.com/vulnerabilities/25215

9.1 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.079 Low

EPSS

Percentile

94.1%

JSON

Related for PRION:CVE-2006-1123

cve1