6.4

CVE-2006-2046

EPSS 3.64%
Veröffentlicht 26.04.2006 20:06:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Multiple SQL injection vulnerabilities in Application Dynamics Cartweaver ColdFusion 2.16.11 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) category and (2) keywords parameters in (a) Results.cfm, and the (3) ProdID parameter in (b) Details.cfm.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 13

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Application Dynamics ≫ Cartweaver Coldfusion Version <= 2.16.11

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	3.64%	0.874

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.4	10	4.9	AV:N/AC:L/Au:N/C:P/I:P/A:N

http://pridels0.blogspot.com/2006/04/cartweaver-coldfusion-vuln.html

http://secunia.com/advisories/19812

http://www.osvdb.org/24961

http://www.osvdb.org/24962

http://www.securityfocus.com/bid/17941

http://www.securityfocus.com/bid/25210

http://www.techfeed.net/blog/index.cfm/2006/4/26/cartweaver-holes

http://www.vupen.com/english/advisories/2006/1513

https://exchange.xforce.ibmcloud.com/vulnerabilities/26060

https://www.exploit-db.com/exploits/4264

https://nvd.nist.gov/vuln/detail/CVE-2006-2046

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-2046

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-2046

EUVD