7.5
CVE-2006-6807
- EPSS 1%
- Veröffentlicht 28.12.2006 21:28:00
- Zuletzt bearbeitet 16.06.2026 22:33:50
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginSQL injection vulnerability in list.asp in Softwebs Nepal (aka Ananda Raj Pandey) Ananda Real Estate 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the agent parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Softwebs Nepal ≫ Ananda Real Estate Version <= 3.4
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1% | 0.584 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://secunia.com/advisories/23506
http://www.securityfocus.com/bid/21771
http://www.vupen.com/english/advisories/2006/5179
https://www.exploit-db.com/exploits/3001