Lucene search

[email protected]CVE-2006-6706

HistoryDec 23, 2006 - 1:28 a.m.

CVE-2006-6706

2006-12-2301:28:00

CWE-89

[email protected]

web.nvd.nist.gov

cve

2006

6706

sql injection

soumu workflow

groupmax

nvd

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

49.5%

JSON

SQL injection vulnerability in Soumu Workflow for Groupmax 01-00 through 01-01, Soumu Workflow 02-00 through 03-03, and Koukyoumuke Soumu Workflow 01-00 through 01-01 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors in certain web pages.

Affected configurations

NVD

Node

soumukoukyoumuke_soumu_workflowMatch01-00

soumukoukyoumuke_soumu_workflowMatch01-01

soumusoumo_workflowMatch01_00

soumusoumo_workflowMatch01_01

soumusoumu_workflowMatch02-00

soumusoumu_workflowMatch02-01

soumusoumu_workflowMatch03-03

CPENameOperatorVersion
soumu:koukyoumuke_soumu_workflowsoumu koukyoumuke soumu workfloweq01-00
soumu:koukyoumuke_soumu_workflowsoumu koukyoumuke soumu workfloweq01-01
soumu:soumo_workflowsoumu soumo workfloweq01_00
soumu:soumo_workflowsoumu soumo workfloweq01_01
soumu:soumu_workflowsoumu soumu workfloweq02-00
soumu:soumu_workflowsoumu soumu workfloweq02-01
soumu:soumu_workflowsoumu soumu workfloweq03-03

CPE	Name	Operator	Version
soumu:koukyoumuke_soumu_workflow	soumu koukyoumuke soumu workflow	eq	01-00
soumu:koukyoumuke_soumu_workflow	soumu koukyoumuke soumu workflow	eq	01-01
soumu:soumo_workflow	soumu soumo workflow	eq	01_00
soumu:soumo_workflow	soumu soumo workflow	eq	01_01
soumu:soumu_workflow	soumu soumu workflow	eq	02-00
soumu:soumu_workflow	soumu soumu workflow	eq	02-01
soumu:soumu_workflow	soumu soumu workflow	eq	03-03

References

secunia.com/advisories/23399

www.hitachi-support.com/security_e/vuls_e/HS06-016_e/01-e.html

www.vupen.com/english/advisories/2006/5114

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

49.5%

JSON

Related for CVE-2006-6706

cvelist1 nvd1