10

CVE-2006-1000

Exploit

EPSS 2%
Veröffentlicht 06.03.2006 20:06:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Multiple SQL injection vulnerabilities in Pentacle In-Out Board 3.0 and earlier allow remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) newsid parameter to newsdetailsview.asp and (2) password parameter to login.asp.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 13

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

G2soft ≫ Pentacle In-out Board Version6.03

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2%	0.832

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042524.html

http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042525.html

http://secunia.com/advisories/19024

Vendor Advisory

Exploit

http://securitytracker.com/id?1015682

Vendor Advisory

Exploit

http://www.nukedx.com/?viewdoc=13

Vendor Advisory

Exploit

http://www.nukedx.com/?viewdoc=14

Vendor Advisory

Exploit

http://www.securityfocus.com/archive/1/426074/100/0/threaded

http://www.securityfocus.com/archive/1/426075/100/0/threaded

http://www.securityfocus.com/bid/16818

Vendor Advisory

Exploit

http://www.vupen.com/english/advisories/2006/0749

https://nvd.nist.gov/vuln/detail/CVE-2006-1000

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-1000

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-1000

EUVD