7.5

CVE-2006-2517

SQL injection vulnerability in MyWeb Portal Office, Standard Edition, Public Edition, Medical Edition, Citizen Edition, School Edition, and Light Edition allows remote attackers to execute arbitrary SQL commands via unknown attack vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Fujitsu ≫ Myweb Portal Office Edition citizen
Fujitsu ≫ Myweb Portal Office Edition light
Fujitsu ≫ Myweb Portal Office Edition medical
Fujitsu ≫ Myweb Portal Office Edition public
Fujitsu ≫ Myweb Portal Office Edition school
Fujitsu ≫ Myweb Portal Office Edition standard
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.21% 0.646
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/20178
Patch
Vendor Advisory
http://securitytracker.com/id?1016133
http://www.myweb-jp.com/support/tech/tech_common_013.html
http://www.vupen.com/english/advisories/2006/1898
https://exchange.xforce.ibmcloud.com/vulnerabilities/26622