exploitDog

CVE-2006-0774

Опубликовано: 19 фев. 2006

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

SQL injection vulnerability in deleteSession() in DB_eSession library 1.0.2 and earlier, as used in multiple products, allows remote attackers to execute arbitrary SQL commands via the $_sess_id_set variable, which is usually derived from PHPSESSID.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:lawrence_osiris:db_esession:*:*:*:*:*:*:*:*

Версия до 1.0.2 (включая)

EPSS

Процентиль: 81%

0.01615

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2006-0774

ubuntu

почти 20 лет назад

SQL injection vulnerability in deleteSession() in DB_eSession library 1.0.2 and earlier, as used in multiple products, allows remote attackers to execute arbitrary SQL commands via the $_sess_id_set variable, which is usually derived from PHPSESSID.

GHSA-v453-9c8g-w373

github

почти 4 года назад

SQL injection vulnerability in deleteSession() in DB_eSession library 1.0.2 and earlier, as used in multiple products, allows remote attackers to execute arbitrary SQL commands via the $_sess_id_set variable, which is usually derived from PHPSESSID.

EPSS

Процентиль: 81%

0.01615

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other