CVE-2006-1000

Опубликовано: 06 мар. 2006

Источник: nvd

CVSS2: 10

EPSS Низкий

Описание

Multiple SQL injection vulnerabilities in Pentacle In-Out Board 3.0 and earlier allow remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) newsid parameter to newsdetailsview.asp and (2) password parameter to login.asp.

Ссылки

http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042524.html
http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042525.html
http://secunia.com/advisories/19024
Exploit
Vendor Advisory
http://securitytracker.com/id?1015682
Exploit
Vendor Advisory
http://www.nukedx.com/?viewdoc=13
Exploit
Vendor Advisory
http://www.nukedx.com/?viewdoc=14
Exploit
Vendor Advisory
http://www.securityfocus.com/archive/1/426074/100/0/threaded
http://www.securityfocus.com/archive/1/426075/100/0/threaded
http://www.securityfocus.com/bid/16818
Exploit
Vendor Advisory
http://www.vupen.com/english/advisories/2006/0749
http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042524.html
http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042525.html
http://secunia.com/advisories/19024
Exploit
Vendor Advisory
http://securitytracker.com/id?1015682
Exploit
Vendor Advisory
http://www.nukedx.com/?viewdoc=13
Exploit
Vendor Advisory
http://www.nukedx.com/?viewdoc=14
Exploit
Vendor Advisory
http://www.securityfocus.com/archive/1/426074/100/0/threaded
http://www.securityfocus.com/archive/1/426075/100/0/threaded
http://www.securityfocus.com/bid/16818
Exploit
Vendor Advisory
http://www.vupen.com/english/advisories/2006/0749

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:g2soft:pentacle_in-out_board:6.03:*:*:*:*:*:*:*

EPSS

Процентиль: 83%

0.02002

Низкий

10 Critical

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-fhm3-h4q6-pq4x

github

почти 4 года назад