7.5
CVE-2006-4212
- EPSS 1.31%
- Veröffentlicht 17.08.2006 21:04:00
- Zuletzt bearbeitet 16.06.2026 22:28:37
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginSQL injection vulnerability in b0zz and Chris Vincent Owl Intranet Engine 0.90 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
B0zz And Chris Vincent ≫ Owl Intranet Engine Version0.90
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.31% | 0.669 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://secunia.com/advisories/21519
http://sourceforge.net/tracker/index.php?func=detail&aid=1540643&group_id=9444&atid=309444
http://www.securityfocus.com/bid/19552
http://www.vupen.com/english/advisories/2006/3285
http://jvn.jp/jp/JVN%2339103264/index.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/28404