Lucene search

K
cve[email protected]CVE-2006-4212
HistoryAug 17, 2006 - 9:04 p.m.

CVE-2006-4212

2006-08-1721:04:00
web.nvd.nist.gov
36
cve-2006-4212
sql injection
b0zz
chris vincent
owl intranet engine
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.4 High

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

83.4%

SQL injection vulnerability in b0zz and Chris Vincent Owl Intranet Engine 0.90 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected configurations

NVD
Node
b0zz_and_chris_vincentowl_intranet_engineMatch0.90

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.4 High

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

83.4%

Related for CVE-2006-4212