exploitDog

CVE-2006-2749

Опубликовано: 01 июн. 2006

Источник: nvd

CVSS2: 6.4

EPSS Низкий

Описание

SQL injection vulnerability in search.php in Open Searchable Image Catalogue (OSIC) 0.7.0.1 and earlier allows remote attackers to inject arbitrary SQL commands via the (1) txtCustomField and (2) CustomFieldID array parameters.

Ссылки

http://secunia.com/advisories/20341
Vendor Advisory
http://securityreason.com/securityalert/1014
http://securitytracker.com/id?1016178
http://sourceforge.net/forum/forum.php?forum_id=576483
http://svn.sourceforge.net/viewcvs.cgi/osic-win/branches/osic_0-7/osic/search.php?view=markup&rev=477
http://www.seclab.tuwien.ac.at/advisories/TUVSA-0605-001.txt
Vendor Advisory
http://www.securityfocus.com/archive/1/435380/100/0/threaded
http://www.securityfocus.com/bid/18169
http://secunia.com/advisories/20341
Vendor Advisory
http://securityreason.com/securityalert/1014
http://securitytracker.com/id?1016178
http://sourceforge.net/forum/forum.php?forum_id=576483
http://svn.sourceforge.net/viewcvs.cgi/osic-win/branches/osic_0-7/osic/search.php?view=markup&rev=477
http://www.seclab.tuwien.ac.at/advisories/TUVSA-0605-001.txt
Vendor Advisory
http://www.securityfocus.com/archive/1/435380/100/0/threaded
http://www.securityfocus.com/bid/18169

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:open_searchable_image_catalogue:open_searchable_image_catalogue:*:*:*:*:*:*:*:*

Версия до 0.7.0.0 (включая)

EPSS

Процентиль: 69%

0.01346

Низкий

6.4 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-8v74-623r-vrrp

github

больше 4 лет назад

SQL injection vulnerability in search.php in Open Searchable Image Catalogue (OSIC) 0.7.0.1 and earlier allows remote attackers to inject arbitrary SQL commands via the (1) txtCustomField and (2) CustomFieldID array parameters.

EPSS

Процентиль: 69%

0.01346

Низкий

6.4 Medium

CVSS2

Дефекты

NVD-CWE-Other