CVE-2006-4757

Опубликовано: 13 сент. 2006

Источник: nvd

CVSS2: 4.6

EPSS Низкий

Описание

Multiple SQL injection vulnerabilities in the admin section in e107 0.7.5 allow remote authenticated administrative users to execute arbitrary SQL commands via the (1) linkopentype, (2) linkrender, (3) link_class, and (4) link_id parameters in (a) links.php; the (5) searchquery parameter in (b) users.php; and the (6) download_category_class parameter in (c) download.php. NOTE: an e107 developer has disputed the significance of the vulnerability, stating that "If your admins are injecting you, you might want to reconsider their access."

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:e107:e107:*:*:*:*:*:*:*:*

Версия до 0.7.5 (включая)

cpe:2.3:a:e107:e107:0.6_10:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.6_11:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.6_12:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.6_13:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.6_14:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.6_15:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.6_15a:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.7:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.7.1:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.7.2:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.7.3:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.7.4:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.545:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.547_beta:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.548_beta:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.549_beta:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.551_beta:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.552_beta:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.553_beta:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.554:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.554_beta:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.555_beta:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.600:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.601:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.602:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.603:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.604:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.605:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.606:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.607:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.608:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.609:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.610:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.611:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.612:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.613:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.614:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.615:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.615a:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.616:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.617:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.6171:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.6172:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.6173:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.6174:*:*:*:*:*:*:*

cpe:2.3:a:e107:e107:0.6175:*:*:*:*:*:*:*

EPSS

Процентиль: 61%

0.00414

Низкий

4.6 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-38c5-q7qw-gq24

github

почти 4 года назад