7.5
CVE-2006-6215
- EPSS 1.01%
- Veröffentlicht 01.12.2006 01:28:00
- Zuletzt bearbeitet 16.06.2026 22:32:41
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
Multiple SQL injection vulnerabilities in Wallpaper Website (Wallpaper Complete Website) 1.0.09 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) login or (2) password parameter to (a) process.php, or the (3) wallpaperid parameter to (b) dlwallpaper.php.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Wallpaper ≫ Wallpaper Complete Website Version <= 1.0.09
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.01% | 0.587 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://www.vupen.com/english/advisories/2006/4687