Lucene search
HistoryFeb 23, 2007 - 3:28 a.m.
CVE-2006-7034
cve-2006-7034
sql injection
directory.php
super link exchange script 1.0
remote attackers
arbitrary sql queries
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.6 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
69.8%
SQL injection vulnerability in directory.php in Super Link Exchange Script 1.0 might allow remote attackers to execute arbitrary SQL queries via the cat parameter.
Affected configurations
Node
applemac_os_xMatch10.4.9
ORhphp-ux
ORhptru64Match5.1b_pk2_bl22
ORibmaix
ORibmos2
ORlinuxlinux_kernel
ORmicrosoftwindows_2000
ORmicrosoftwindows_2003_serverMatchsp2
ORmicrosoftwindows_95
ORmicrosoftwindows_98gold
ORmicrosoftwindows_98se
ORmicrosoftwindows_me
ORmicrosoftwindows_ntMatch4.0
ORmicrosoftwindows_xpgold
ORsanta_cruz_operationsco_unix
ORsunsolaris
ORwindriverbsdos
super_link_exchange_scriptsuper_link_exchange_scriptMatch1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| super_link_exchange_script:super_link_exchange_script | super link exchange script | eq | 1.0 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.6 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
69.8%
Related for CVE-2006-7034