CVE-2006-2214

Exploit

EPSS 0.86%
Published 05.05.2006 12:46:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

Multiple SQL injection vulnerabilities in 4images 1.7.1 and earlier allow remote attackers to execute arbitrary SQL commands via the sessionid parameter in (1) top.php and (2) member.php.  NOTE: this issue has also been reported to affect 1.7.2.

Affected products Warnungen 0 Metrics 2 CWE 0 References 10

Data is provided by the National Vulnerability Database (NVD)

4images ≫ Image Gallery Management System Version <= 1.7.2

4images ≫ Image Gallery Management System Version1.7.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.86%	0.74

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://archives.neohapsis.com/archives/bugtraq/2006-05/0012.html

Vendor Advisory

Exploit

http://secunia.com/advisories/19908

Vendor Advisory

Exploit

http://www.osvdb.org/25153

http://www.osvdb.org/25154

http://www.securityfocus.com/bid/17748

Exploit

http://www.vupen.com/english/advisories/2006/1604

https://exchange.xforce.ibmcloud.com/vulnerabilities/26184

https://nvd.nist.gov/vuln/detail/CVE-2006-2214

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-2214

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-2214

EUVD