CVE-2006-2279

EPSS 1.46%
Veröffentlicht 10.05.2006 02:14:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Multiple SQL injection vulnerabilities in SaphpLesson 3.0 allow remote attackers to execute arbitrary SQL commands via (1) the Find parameter in (a) search.php, and the (2) LID and (3) Rate parameters in (b) misc.php.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 11

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Arabless ≫ Saphplesson Version3.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.46%	0.8

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://secunia.com/advisories/20034

Vendor Advisory

http://securityreason.com/securityalert/862

http://www.securityfocus.com/archive/1/433052/100/0/threaded

http://www.vupen.com/english/advisories/2006/1708

http://www.osvdb.org/25362

http://www.osvdb.org/25363

http://www.securityfocus.com/bid/17848

https://exchange.xforce.ibmcloud.com/vulnerabilities/26293

https://nvd.nist.gov/vuln/detail/CVE-2006-2279

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-2279

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-2279

EUVD