Lucene search

MitreCVE-2006-3770

HistoryJul 24, 2006 - 12:19 p.m.

CVE-2006-3770

2006-07-2412:19:00

mitre

web.nvd.nist.gov

cve-2006-3770

sql injection

index.php

phpfaber topsites 2.0.9

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.9

Confidence

Low

EPSS

0.008

Percentile

81.7%

JSON

Multiple SQL injection vulnerabilities in index.php in phpFaber TopSites 2.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) i_cat or (2) method parameters.

Affected configurations

Nvd

Node

phpfabertopsitesRange≤2.0.9

VendorProductVersionCPE
phpfabertopsites*cpe:2.3:a:phpfaber:topsites:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
phpfaber	topsites	*	cpe:2.3:a:phpfaber:topsites::::::::

References

secunia.com/advisories/21141

securityreason.com/securityalert/1266

securitytracker.com/id?1016552

www.majorsecurity.de/advisory/major_rls21.txt

www.osvdb.org/27415

www.securityfocus.com/archive/1/440648/100/0/threaded

www.securityfocus.com/bid/19097

www.vupen.com/english/advisories/2006/2913

exchange.xforce.ibmcloud.com/vulnerabilities/27879

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.9

Confidence

Low

EPSS

0.008

Percentile

81.7%

JSON

Related for CVE-2006-3770