Lucene search

[email protected]CVE-2006-6181

HistoryDec 01, 2006 - 12:28 a.m.

CVE-2006-6181

2006-12-0100:28:00

[email protected]

web.nvd.nist.gov

sql injection

clicktech clickcontact

default.asp

alphasort

orderby

remote attackers

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.9 High

AI Score

Confidence

Low

0.037 Low

EPSS

Percentile

91.8%

JSON

Multiple SQL injection vulnerabilities in default.asp in ClickTech ClickContact allow remote attackers to execute arbitrary SQL commands via the (1) AlphaSort, (2) In, and (3) orderby parameters.

Affected configurations

NVD

Node

clicktechclickcontact

CPENameOperatorVersion
clicktech:clickcontactclicktech clickcontacteq*

CPE	Name	Operator	Version
clicktech:clickcontact	clicktech clickcontact	eq	*

References

secunia.com/advisories/23119

www.aria-security.com/forum/showthread.php?t=51

www.securityfocus.com/archive/1/452825/100/0/threaded

www.securityfocus.com/bid/21302

www.vupen.com/english/advisories/2006/4741

exchange.xforce.ibmcloud.com/vulnerabilities/30534

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.9 High

AI Score

Confidence

Low

0.037 Low

EPSS

Percentile

91.8%

JSON

Related for CVE-2006-6181

nvd1 cvelist1