CVE-2006-2214

Exploit

EPSS 0.86%
Veröffentlicht 05.05.2006 12:46:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Multiple SQL injection vulnerabilities in 4images 1.7.1 and earlier allow remote attackers to execute arbitrary SQL commands via the sessionid parameter in (1) top.php and (2) member.php.  NOTE: this issue has also been reported to affect 1.7.2.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 10

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

4images ≫ Image Gallery Management System Version <= 1.7.2

4images ≫ Image Gallery Management System Version1.7.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.86%	0.74

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://archives.neohapsis.com/archives/bugtraq/2006-05/0012.html

Vendor Advisory

Exploit

http://secunia.com/advisories/19908

Vendor Advisory

Exploit

http://www.osvdb.org/25153

http://www.osvdb.org/25154

http://www.securityfocus.com/bid/17748

Exploit

http://www.vupen.com/english/advisories/2006/1604

https://exchange.xforce.ibmcloud.com/vulnerabilities/26184

https://nvd.nist.gov/vuln/detail/CVE-2006-2214

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-2214

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-2214

EUVD