CVE-2006-0123

Опубликовано: 09 янв. 2006

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Multiple SQL injection vulnerabilities in ADN Forum 1.0b allow remote attackers to execute arbitrary SQL commands via the (1) fid parameter in index.php and (2) pagid parameter in verpag.php, and possibly other vectors.

Ссылки

http://evuln.com/vulns/15/summary.html
Exploit
Vendor Advisory
http://secunia.com/advisories/18300
Vendor Advisory
http://securitytracker.com/id?1015445
Exploit
http://www.osvdb.org/22240
Exploit
http://www.osvdb.org/22241
Exploit
http://www.securityfocus.com/archive/1/420990/100/0/threaded
http://www.securityfocus.com/bid/16157
Exploit
http://www.vupen.com/english/advisories/2006/0077
Vendor Advisory
http://evuln.com/vulns/15/summary.html
Exploit
Vendor Advisory
http://secunia.com/advisories/18300
Vendor Advisory
http://securitytracker.com/id?1015445
Exploit
http://www.osvdb.org/22240
Exploit
http://www.osvdb.org/22241
Exploit
http://www.securityfocus.com/archive/1/420990/100/0/threaded
http://www.securityfocus.com/bid/16157
Exploit
http://www.vupen.com/english/advisories/2006/0077
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:adn_forum:adn_forum:1.0:*:*:*:*:*:*:*

cpe:2.3:a:adn_forum:adn_forum:1.0b:*:*:*:*:*:*:*

EPSS

Процентиль: 81%

0.01485

Низкий

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-vq8m-fw42-3w57

github

почти 4 года назад