CVE-2006-2972

Опубликовано: 12 июн. 2006

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

SQL injection vulnerability in vs_resource.php in Arantius Vice Stats 0.5b and 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter.

Ссылки

http://secunia.com/advisories/20512
Patch
Vendor Advisory
http://securityreason.com/securityalert/1073
http://www.arantius.com/topic/vice+stats
http://www.attrition.org/pipermail/vim/2006-June/000848.html
http://www.securityfocus.com/archive/1/436290/100/0/threaded
http://www.securityfocus.com/bid/18317
https://exchange.xforce.ibmcloud.com/vulnerabilities/26985
http://secunia.com/advisories/20512
Patch
Vendor Advisory
http://securityreason.com/securityalert/1073
http://www.arantius.com/topic/vice+stats
http://www.attrition.org/pipermail/vim/2006-June/000848.html
http://www.securityfocus.com/archive/1/436290/100/0/threaded
http://www.securityfocus.com/bid/18317
https://exchange.xforce.ibmcloud.com/vulnerabilities/26985

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:arantius:vice_stats:0.5_beta:*:*:*:*:*:*:*

cpe:2.3:a:arantius:vice_stats:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 74%

0.00816

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-qfw4-965j-4v9p

github

почти 4 года назад