CVE-2006-0626

Опубликовано: 09 фев. 2006

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

SQL injection vulnerability in spip_acces_doc.php3 in SPIP 1.8.2g and earlier allows remote attackers to execute arbitrary SQL commands via the file parameter.

Ссылки

http://retrogod.altervista.org/spip_182g_shell_inj_xpl.html
Exploit
http://secunia.com/advisories/18676
http://securitytracker.com/id?1015602
http://www.osvdb.org/23087
http://www.securityfocus.com/bid/16551
Exploit
http://www.vupen.com/english/advisories/2006/0483
https://exchange.xforce.ibmcloud.com/vulnerabilities/24599
http://retrogod.altervista.org/spip_182g_shell_inj_xpl.html
Exploit
http://secunia.com/advisories/18676
http://securitytracker.com/id?1015602
http://www.osvdb.org/23087
http://www.securityfocus.com/bid/16551
Exploit
http://www.vupen.com/english/advisories/2006/0483
https://exchange.xforce.ibmcloud.com/vulnerabilities/24599

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:spip:spip:1.8.2g:*:*:*:*:*:*:*

EPSS

Процентиль: 76%

0.00928

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2006-0626

debian

почти 20 лет назад

SQL injection vulnerability in spip_acces_doc.php3 in SPIP 1.8.2g and ...

GHSA-3c9p-hxf7-xpc6

github

почти 4 года назад