Lucene search

K
cveMitreCVE-2006-5943
HistoryNov 17, 2006 - 12:07 a.m.

CVE-2006-5943

2006-11-1700:07:00
mitre
web.nvd.nist.gov
22
cve-2006-5943
sql injection
website designs for less
inventory manager
nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

9

Confidence

Low

EPSS

0.005

Percentile

75.7%

Multiple SQL injection vulnerabilities in inventory/display/imager.asp in Website Designs for Less Inventory Manager allow remote attackers to execute arbitrary SQL commands via the (1) pictable, (2) picfield, or (3) where parameter.

Affected configurations

Nvd
Node
website_designs_for_lessinventory_manager
VendorProductVersionCPE
website_designs_for_lessinventory_manager*cpe:2.3:a:website_designs_for_less:inventory_manager:*:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

9

Confidence

Low

EPSS

0.005

Percentile

75.7%

Related for CVE-2006-5943