7.5
CVE-2006-5797
- EPSS 1.37%
- Veröffentlicht 08.11.2006 20:07:00
- Zuletzt bearbeitet 16.06.2026 22:31:53
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginMultiple SQL injection vulnerabilities in default.asp in Xenis.creator CMS allow remote attackers to execute arbitrary SQL commands via the (1) nav, (2) s, or (3) print parameters.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.37% | 0.684 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://marc.info/?l=bugtraq&m=116266150514762&w=2
http://marc.info/?l=bugtraq&m=116267021732120&w=2
http://secunia.com/advisories/22716
http://securitytracker.com/id?1017162
http://www.majorsecurity.de/index_2.php?major_rls=major_rls31
http://www.securityfocus.com/bid/20908
http://www.vupen.com/english/advisories/2006/4470
https://exchange.xforce.ibmcloud.com/vulnerabilities/30017