Lucene search

K
cve[email protected]CVE-2006-1423
HistoryMar 28, 2006 - 8:02 p.m.

CVE-2006-1423

2006-03-2820:02:00
CWE-89
web.nvd.nist.gov
22
cve-2006-1423
sql injection
ubb.threads
showflat.php
nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

8.4 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.8%

SQL injection vulnerability in showflat.php in UBB.threads 5.5.1, 6.0 br5, 6.0.1, 6.0.2, and earlier, allows remote attackers to execute arbitrary SQL commands via the Number parameter.

Affected configurations

NVD
Node
ubbcentralubb.threadsMatch5.5.1
OR
ubbcentralubb.threadsMatch6.0br5
OR
ubbcentralubb.threadsMatch6.0.1
OR
ubbcentralubb.threadsMatch6.0.2

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

8.4 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.8%

Related for CVE-2006-1423