7.5

CVE-2006-5184

SQL injection vulnerability in PKR Internet Taskjitsu before 2.0.6 allows remote attackers to execute arbitrary SQL commands via the key parameter, when the limit query parameter is set to customerid.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Pkr Internet ≫ Taskjitsu Version <= 2.0.5
Pkr Internet ≫ Taskjitsu Version0.1
Pkr Internet ≫ Taskjitsu Version2.0
Pkr Internet ≫ Taskjitsu Version2.0.1
Pkr Internet ≫ Taskjitsu Version2.0.3
Pkr Internet ≫ Taskjitsu Version2.0.4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.3% 0.666
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/22257
Patch
Vendor Advisory
http://securitytracker.com/id?1016978
http://www.securityfocus.com/bid/20332
Patch
http://www.vupen.com/english/advisories/2006/3903
https://www.pkrinternet.com/download/RELEASE-NOTES.txt
URL Repurposed
https://www.pkrinternet.com/taskjitsu/task/3517
Patch
URL Repurposed