CVE-2006-2042
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
Confidence
Low
EPSS
Percentile
84.0%
Adobe Dreamweaver 8 before 8.0.2 and MX 2004 can generate code that allows SQL injection attacks in the (1) ColdFusion, (2) PHP mySQL, (3) ASP, (4) ASP.NET, and (5) JSP server models.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| adobe | dreamweaver | 7.0 | cpe:2.3:a:adobe:dreamweaver:7.0:*:*:*:*:*:*:* |
| adobe | dreamweaver | 8.0 | cpe:2.3:a:adobe:dreamweaver:8.0:*:*:*:*:*:*:* |
References
archives.neohapsis.com/archives/bugtraq/2006-05/0194.html
secunia.com/advisories/20054
securitytracker.com/id?1016050
www.adobe.com/support/security/bulletins/apsb06-07.html
www.osvdb.org/25361
www.securityfocus.com/bid/17928
www.vupen.com/english/advisories/2006/1753
exchange.xforce.ibmcloud.com/vulnerabilities/26339
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
Confidence
Low
EPSS
Percentile
84.0%