Lucene search
MitreCVE-2006-4978HistorySep 25, 2006 - 1:07 a.m.
CVE-2006-4978
2006-09-2501:07:00
mitre
web.nvd.nist.gov
25
cve
sql injection
walter beschmout
phpquiz 1.2
nvd
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.9
Confidence
Low
EPSS
0.009
Percentile
82.8%
Multiple SQL injection vulnerabilities in Walter Beschmout PhpQuiz 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the univers parameter in score.php and (2) the quiz_id parameter in home.php, accessed through the front/ URI.
Affected configurations
Node
walter_beschmoutphpquizRange≤1.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| walter_beschmout | phpquiz | * | cpe:2.3:a:walter_beschmout:phpquiz:*:*:*:*:*:*:*:* |
References
Related
cvelist
cvelist
CVE-2006-4978
2006-09-25 01:00:00
nvd
nvd
CVE-2006-4978
2006-09-25 01:07:00
exploitdb
exploitdb
phpQuiz 0.1.2 - SQL Injection / Code Execution
2006-09-16 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.9
Confidence
Low
EPSS
0.009
Percentile
82.8%
Related for CVE-2006-4978