7.5

CVE-2006-2504

Exploit
Multiple SQL injection vulnerabilities in mono AZBOARD 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) search and (2) cate parameters to (a) list.asp, and the (3) id and cate parameters to (b) admin_ok.asp.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Azboard ≫ Azboard Version <= 1.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.84% 0.763
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/20112
http://securityreason.com/securityalert/928
http://user.chol.com/~jyj9782/sec/azboard_advisory.txt
Exploit
http://www.osvdb.org/25527
http://www.osvdb.org/25528
http://www.securityfocus.com/archive/1/434010/100/0/threaded
http://www.securityfocus.com/bid/17990
http://www.vupen.com/english/advisories/2006/1827
https://exchange.xforce.ibmcloud.com/vulnerabilities/26495