Lucene search

MitreCVE-2006-2486

HistoryMay 19, 2006 - 11:02 p.m.

CVE-2006-2486

2006-05-1923:02:00

mitre

web.nvd.nist.gov

cve-2006-2486

sql injection

find.php

yapbb 1.2 beta2

nvd

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

AI Score

8.4

Confidence

Low

EPSS

0.004

Percentile

73.4%

JSON

SQL injection vulnerability in find.php in YapBB 1.2 Beta2 and earlier allows remote attackers to execute arbitrary SQL commands via the userID parameter.

Affected configurations

Nvd

Node

yapbbyapbbMatch1.1

yapbbyapbbMatch1.2

yapbbyapbbMatch1.2_beta2

VendorProductVersionCPE
yapbbyapbb1.1cpe:2.3:a:yapbb:yapbb:1.1:*:*:*:*:*:*:*
yapbbyapbb1.2cpe:2.3:a:yapbb:yapbb:1.2:*:*:*:*:*:*:*
yapbbyapbb1.2_beta2cpe:2.3:a:yapbb:yapbb:1.2_beta2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
yapbb	yapbb	1.1	cpe:2.3:a:yapbb:yapbb:1.1:::::::*
yapbb	yapbb	1.2	cpe:2.3:a:yapbb:yapbb:1.2:::::::*
yapbb	yapbb	1.2_beta2	cpe:2.3:a:yapbb:yapbb:1.2_beta2:::::::*

References

securityreason.com/securityalert/923

www.securityfocus.com/archive/1/434039/100/0/threaded

www.securityfocus.com/bid/17988

exchange.xforce.ibmcloud.com/vulnerabilities/26456

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

AI Score

8.4

Confidence

Low

EPSS

0.004

Percentile

73.4%

JSON

Related for CVE-2006-2486