CVE-2006-5509

EPSS 1%
Veröffentlicht 25.10.2006 22:07:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

Eval injection vulnerability in addentry.php in WoltLab Burning Book 1.1.2 allows remote attackers to execute arbitrary PHP code via crafted POST requests that store PHP code in a database that is later processed by eval, as demonstrated using SQL injection via the n parameter.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 10

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Woltlab ≫ Burning Book Version1.1.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1%	0.76

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://secunia.com/advisories/22442

http://securityreason.com/securityalert/1774

http://www.security.nnov.ru/Odocument711.html

http://www.securityfocus.com/archive/1/448796/100/100/threaded

http://www.vupen.com/english/advisories/2006/4062

http://www.securityfocus.com/bid/20563

https://exchange.xforce.ibmcloud.com/vulnerabilities/29599

https://nvd.nist.gov/vuln/detail/CVE-2006-5509

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-5509

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-5509

EUVD