5.1

CVE-2006-1638

Multiple SQL injection vulnerabilities in aWebBB 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) Username parameter to (a) accounts.php, (b) changep.php, (c) editac.php, (d) feedback.php, (e) fpass.php, (f) login.php, (g) post.php, (h) reply.php, or (i) reply_log.php; (2) p parameter to (j) dpost.php; (3) c parameter to (k) list.php or (l) ndis.php; or (12) q parameter to (m) search.php.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Aweb Labs ≫ Awebbb Version1.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.81% 0.758
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.1 4.9 6.4
AV:N/AC:H/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://evuln.com/vulns/117/summary.html
http://secunia.com/advisories/19486
Vendor Advisory
http://www.securityfocus.com/archive/1/431064/100/0/threaded
http://www.securityfocus.com/bid/17352
http://www.vupen.com/english/advisories/2006/1197
http://www.osvdb.org/24340
http://www.osvdb.org/24341
http://www.osvdb.org/24342
http://www.osvdb.org/24343
http://www.osvdb.org/24344
http://www.osvdb.org/24345
http://www.osvdb.org/24346
http://www.osvdb.org/24347
http://www.osvdb.org/24348
http://www.osvdb.org/24349
http://www.osvdb.org/24350
http://www.osvdb.org/24351
http://www.osvdb.org/24352
https://exchange.xforce.ibmcloud.com/vulnerabilities/25587