6.4
CVE-2006-2697
- EPSS 1.11%
- Veröffentlicht 31.05.2006 10:06:00
- Zuletzt bearbeitet 16.06.2026 22:25:33
- Erkennungen
LoginMultiple SQL injection vulnerabilities in Easy-Content Forums 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) startletter parameter in userview.asp and the (2) forumname parameter in topics.asp.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Easy-content Forums ≫ Easy-content Forums Version 1.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.11% | 0.618 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 6.4 | 10 | 4.9 |
AV:N/AC:L/Au:N/C:N/I:P/A:P
|
http://securityreason.com/securityalert/997
http://www.securityfocus.com/archive/1/435140/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/26804