Lucene search

PRIOn knowledge basePRION:CVE-2006-2742

HistoryJun 01, 2006 - 10:02 a.m.

Sql injection

2006-06-0110:02:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.3%

JSON

SQL injection vulnerability in Drupal 4.6.x before 4.6.7 and 4.7.0 allows remote attackers to execute arbitrary SQL commands via the (1) count and (2) from variables to (a) database.mysql.inc, (b) database.pgsql.inc, and © database.mysqli.inc.

CPENameOperatorVersion
drupaleq4.6.0
drupaleq4.6
drupaleq4.6.5
drupaleq4.6.2
drupaleq4.6.3
drupaleq4.6.4
drupaleq4.7.0
drupaleq4.6.1
drupaleq4.6.6

Name	Operator	Version
drupal	eq	4.6.0
drupal	eq	4.6
drupal	eq	4.6.5
drupal	eq	4.6.2
drupal	eq	4.6.3
drupal	eq	4.6.4
drupal	eq	4.7.0
drupal	eq	4.6.1
drupal	eq	4.6.6

References

secunia.com/advisories/20140

secunia.com/advisories/21244

www.debian.org/security/2006/dsa-1125

www.securityfocus.com/archive/1/435790/100/0/threaded

www.securityfocus.com/bid/18245

www.vupen.com/english/advisories/2006/1975

drupal.org/node/65357

exchange.xforce.ibmcloud.com/vulnerabilities/26654