Lucene search
HistoryNov 28, 2006 - 11:28 p.m.
CVE-2006-6152
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.5
Confidence
Low
EPSS
0.005
Percentile
75.6%
Multiple SQL injection vulnerabilities in vSpin.net Classified System 2004 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to (a) cat.asp, or the (2) keyword, (3) order, (4) sort, (5) menuSelect, or (6) state parameter to (b) search.asp.
Affected configurations
Node
vspin.netclassified_systemMatch2004
| Vendor | Product | Version | CPE |
|---|---|---|---|
| vspin.net | classified_system | 2004 | cpe:2.3:a:vspin.net:classified_system:2004:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2006-6152
2006-11-28 23:00:00
exploitdb
exploitdb
vSpin Classified System 2004 - 'cat.asp?cat' SQL Injection
2006-11-20 00:00:00
cve
cve
CVE-2006-6152
2006-11-28 23:28:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.5
Confidence
Low
EPSS
0.005
Percentile
75.6%
Related for NVD:CVE-2006-6152