Lucene search

[email protected]CVE-2006-5635

HistoryNov 01, 2006 - 12:07 a.m.

CVE-2006-5635

2006-11-0100:07:00

[email protected]

web.nvd.nist.gov

sql injection

vulnerability

forum

web wiz forums

remote attackers

sql commands

kw parameter

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.8 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.8%

JSON

SQL injection vulnerability in forum/search.asp in Web Wiz Forums allows remote attackers to execute arbitrary SQL commands via the KW parameter.

Affected configurations

NVD

Node

web_wiz_forumsweb_wiz_forumsMatch6.34

web_wiz_forumsweb_wiz_forumsMatch7.0

web_wiz_forumsweb_wiz_forumsMatch7.0.1

web_wiz_forumsweb_wiz_forumsMatch7.0_beta1

web_wiz_forumsweb_wiz_forumsMatch7.5

web_wiz_forumsweb_wiz_forumsMatch7.7a

web_wiz_forumsweb_wiz_forumsMatch7.7b

web_wiz_forumsweb_wiz_forumsMatch7.8

web_wiz_forumsweb_wiz_forumsMatch7.9

web_wiz_forumsweb_wiz_forumsMatch7.51

web_wiz_forumsweb_wiz_forumsMatch7.91

web_wiz_forumsweb_wiz_forumsMatch8.0_alpha

web_wiz_forumsweb_wiz_forumsMatch8.04

CPENameOperatorVersion
web_wiz_forums:web_wiz_forumsweb wiz forumseq6.34
web_wiz_forums:web_wiz_forumsweb wiz forumseq7.0
web_wiz_forums:web_wiz_forumsweb wiz forumseq7.0.1
web_wiz_forums:web_wiz_forumsweb wiz forumseq7.0_beta1
web_wiz_forums:web_wiz_forumsweb wiz forumseq7.5
web_wiz_forums:web_wiz_forumsweb wiz forumseq7.7a
web_wiz_forums:web_wiz_forumsweb wiz forumseq7.7b
web_wiz_forums:web_wiz_forumsweb wiz forumseq7.8
web_wiz_forums:web_wiz_forumsweb wiz forumseq7.9
web_wiz_forums:web_wiz_forumsweb wiz forumseq7.51

CPE	Name	Operator	Version
web_wiz_forums:web_wiz_forums	web wiz forums	eq	6.34
web_wiz_forums:web_wiz_forums	web wiz forums	eq	7.0
web_wiz_forums:web_wiz_forums	web wiz forums	eq	7.0.1
web_wiz_forums:web_wiz_forums	web wiz forums	eq	7.0_beta1
web_wiz_forums:web_wiz_forums	web wiz forums	eq	7.5
web_wiz_forums:web_wiz_forums	web wiz forums	eq	7.7a
web_wiz_forums:web_wiz_forums	web wiz forums	eq	7.7b
web_wiz_forums:web_wiz_forums	web wiz forums	eq	7.8
web_wiz_forums:web_wiz_forums	web wiz forums	eq	7.9
web_wiz_forums:web_wiz_forums	web wiz forums	eq	7.51

Rows per page:

1-10 of 131

References

securityreason.com/securityalert/1801

www.securityfocus.com/archive/1/450034/100/0/threaded

www.securityfocus.com/bid/20778

exchange.xforce.ibmcloud.com/vulnerabilities/29898

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.8 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.8%

JSON

Related for CVE-2006-5635

nvd1 cvelist1