Lucene search
HistoryJan 16, 2007 - 11:28 p.m.
CVE-2006-6932
cve
2006
6932
sql injection
image gallery
access database
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
9 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
55.3%
Multiple SQL injection vulnerabilities in Image Gallery with Access Database allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to (a) dispimage.asp, or the (2) order or (3) page parameter to (b) default.asp.
Affected configurations
Node
image_gallery_with_access_databaseimage_gallery_with_access_database
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
9 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
55.3%
Related for CVE-2006-6932