Lucene search
PRIOn knowledge basePRION:CVE-2006-2189HistoryMay 04, 2006 - 12:38 p.m.
Sql injection
2006-05-0412:38:00
PRIOn knowledge base
www.prio-n.com
5
8.6 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.006 Low
EPSS
Percentile
78.8%
SQL injection vulnerability in search.php in Servous sBLOG 0.7.2 allows remote attackers to execute arbitrary SQL commands via the keyword parameter. NOTE: this issue can be used to trigger path disclosure. In addition, it might be primary to vector 1 in CVE-2006-1135.
Related
cve
cve
CVE-2006-2189
2006-05-04 12:38:00
CVE-2006-1135
2006-03-10 02:02:00
nessus
nessus
sBLOG search.php keyword Parameter SQL Injection
2006-05-03 00:00:00
prion
prion
Cross site scripting
2006-03-10 02:02:00
8.6 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.006 Low
EPSS
Percentile
78.8%
Related for PRION:CVE-2006-2189