Lucene search

[email protected]CVE-2006-1330

HistoryMar 21, 2006 - 1:06 a.m.

CVE-2006-1330

2006-03-2101:06:00

CWE-89

[email protected]

web.nvd.nist.gov

cve-2006-1330

sql injection

phpwebsite 0.83

remote code execution

security vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.5 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.8%

JSON

Multiple SQL injection vulnerabilities in phpWebsite 0.83 and earlier allow remote attackers to execute arbitrary SQL commands via the sid parameter to (1) friend.php or (2) article.php.

Affected configurations

NVD

Node

phpwebsitephpwebsiteMatch0.7.3

phpwebsitephpwebsiteMatch0.8.2

phpwebsitephpwebsiteMatch0.8.3

CPENameOperatorVersion
phpwebsite:phpwebsitephpwebsiteeq0.7.3
phpwebsite:phpwebsitephpwebsiteeq0.8.2
phpwebsite:phpwebsitephpwebsiteeq0.8.3

CPE	Name	Operator	Version
phpwebsite:phpwebsite	phpwebsite	eq	0.7.3
phpwebsite:phpwebsite	phpwebsite	eq	0.8.2
phpwebsite:phpwebsite	phpwebsite	eq	0.8.3

References

secunia.com/advisories/19315

www.securityfocus.com/archive/1/428156

www.securityfocus.com/archive/1/430870/100/0/threaded

www.securityfocus.com/bid/17150

www.vupen.com/english/advisories/2006/1039

exchange.xforce.ibmcloud.com/vulnerabilities/25328

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.5 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.8%

JSON

Related for CVE-2006-1330

prion1 cvelist1 nvd1