7.5
CVE-2006-0939
- EPSS 1.14%
- Veröffentlicht 01.03.2006 02:02:00
- Zuletzt bearbeitet 16.06.2026 22:21:36
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginSQL injection vulnerability in DCI-Taskeen 1.03 allows remote attackers to execute arbitrary SQL commands via the (1) id or (2) action parameter to (a) basket.php, or (3) id or (4) page parameter to (b) cat.php.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dci-designs ≫ Dci-taskeen Version1.03
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.14% | 0.624 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://securityreason.com/securityalert/495
http://securitytracker.com/id?1015685
http://www.securityfocus.com/archive/1/426082
http://www.securityfocus.com/bid/16828
https://exchange.xforce.ibmcloud.com/vulnerabilities/24963