Lucene search
HistorySep 13, 2006 - 10:07 p.m.
CVE-2006-4736
cve
2006
4736
sql injection
cms.r
5.5
remote attackers
adminname
adminpass
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.9 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
77.5%
Multiple SQL injection vulnerabilities in index.php in CMS.R. 5.5 allow remote attackers to execute arbitrary SQL commands via the (1) adminname and (2) adminpass parameters. NOTE: some of these details are obtained from third party information.
Affected configurations
Node
cms.r.cms.r.Match5.5
| CPE | Name | Operator | Version |
|---|---|---|---|
| cms.r.:cms.r. | cms.r. | eq | 5.5 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.9 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
77.5%
Related for CVE-2006-4736