7.5
CVE-2006-3309
- EPSS 2.52%
- Veröffentlicht 29.06.2006 01:05:00
- Zuletzt bearbeitet 16.06.2026 22:26:48
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginSQL injection vulnerability in SPT--ForumTopics.php in Scout Portal Toolkit (SPT) 1.4.0 and earlier allows remote attackers to execute arbitrary SQL commands via the forumid parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Internet Scout Project ≫ Scout Portal Toolkit Version <= 1.4.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.52% | 0.827 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://secunia.com/advisories/20857
http://www.osvdb.org/26870
http://www.securityfocus.com/bid/18688
http://www.vupen.com/english/advisories/2006/2560
https://exchange.xforce.ibmcloud.com/vulnerabilities/27401
https://www.exploit-db.com/exploits/1957