Lucene search

MitreCVE-2006-1495

HistoryMar 30, 2006 - 12:06 a.m.

CVE-2006-1495

2006-03-3000:06:00

mitre

web.nvd.nist.gov

cve-2006-1495

sql injection

phpcollab

netoffice

remote attack

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.3

Confidence

Low

EPSS

0.02

Percentile

89.0%

JSON

SQL injection vulnerability in general/sendpassword.php in (1) PHPCollab 2.4 and 2.5.rc3, and (2) NetOffice 2.5.3-pl1 and 2.6.0b2 allows remote attackers to execute arbitrary SQL commands via the loginForm parameter in the “forgotten password” option.

Affected configurations

Nvd

Node

netofficenetofficeMatch2.5.3_pl1

phpcollabphpcollabMatch2.4

phpcollabphpcollabMatch2.5.rc3

VendorProductVersionCPE
netofficenetoffice2.5.3_pl1cpe:2.3:a:netoffice:netoffice:2.5.3_pl1:*:*:*:*:*:*:*
phpcollabphpcollab2.4cpe:2.3:a:phpcollab:phpcollab:2.4:*:*:*:*:*:*:*
phpcollabphpcollab2.5.rc3cpe:2.3:a:phpcollab:phpcollab:2.5.rc3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
netoffice	netoffice	2.5.3_pl1	cpe:2.3:a:netoffice:netoffice:2.5.3_pl1:::::::*
phpcollab	phpcollab	2.4	cpe:2.3:a:phpcollab:phpcollab:2.4:::::::*
phpcollab	phpcollab	2.5.rc3	cpe:2.3:a:phpcollab:phpcollab:2.5.rc3:::::::*

References

downloads.securityfocus.com/vulnerabilities/exploits/PHPCollab_NetOffice_SQLINJ.php

secunia.com/advisories/19449

secunia.com/advisories/19452

secunia.com/advisories/33258

security.gentoo.org/glsa/glsa-200812-20.xml

www.osvdb.org/24226

www.osvdb.org/24230

www.securityfocus.com/bid/17283

www.securityfocus.com/bid/17286

www.vupen.com/english/advisories/2006/1141

www.vupen.com/english/advisories/2006/1142

exchange.xforce.ibmcloud.com/vulnerabilities/25503

exchange.xforce.ibmcloud.com/vulnerabilities/25505

www.exploit-db.com/exploits/1617

Social References

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.3

Confidence

Low

EPSS

0.02

Percentile

89.0%

JSON

Related for CVE-2006-1495