CVE-2006-5723

Опубликовано: 04 нояб. 2006

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

SQL injection vulnerability in DataparkSearch Engine 4.42 and earlier allows remote attackers to execute arbitrary SQL commands via a malformed hostname in a URL.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:dataparksearch:dataparksearch:4.16:*:*:*:*:*:*:*

cpe:2.3:a:dataparksearch:dataparksearch:4.17:*:*:*:*:*:*:*

cpe:2.3:a:dataparksearch:dataparksearch:4.18:*:*:*:*:*:*:*

cpe:2.3:a:dataparksearch:dataparksearch:4.19:*:*:*:*:*:*:*

cpe:2.3:a:dataparksearch:dataparksearch:4.20:*:*:*:*:*:*:*

cpe:2.3:a:dataparksearch:dataparksearch:4.21:*:*:*:*:*:*:*

cpe:2.3:a:dataparksearch:dataparksearch:4.22:*:*:*:*:*:*:*

cpe:2.3:a:dataparksearch:dataparksearch:4.23:*:*:*:*:*:*:*

cpe:2.3:a:dataparksearch:dataparksearch:4.24:*:*:*:*:*:*:*

cpe:2.3:a:dataparksearch:dataparksearch:4.25:*:*:*:*:*:*:*

cpe:2.3:a:dataparksearch:dataparksearch:4.26:*:*:*:*:*:*:*

cpe:2.3:a:dataparksearch:dataparksearch:4.27:*:*:*:*:*:*:*

cpe:2.3:a:dataparksearch:dataparksearch:4.28:*:*:*:*:*:*:*

cpe:2.3:a:dataparksearch:dataparksearch:4.29:*:*:*:*:*:*:*

cpe:2.3:a:dataparksearch:dataparksearch:4.30:*:*:*:*:*:*:*

cpe:2.3:a:dataparksearch:dataparksearch:4.31:*:*:*:*:*:*:*

cpe:2.3:a:dataparksearch:dataparksearch:4.32:*:*:*:*:*:*:*

cpe:2.3:a:dataparksearch:dataparksearch:4.33:*:*:*:*:*:*:*

cpe:2.3:a:dataparksearch:dataparksearch:4.34:*:*:*:*:*:*:*

cpe:2.3:a:dataparksearch:dataparksearch:4.35:*:*:*:*:*:*:*

cpe:2.3:a:dataparksearch:dataparksearch:4.36:*:*:*:*:*:*:*

cpe:2.3:a:dataparksearch:dataparksearch:4.37:*:*:*:*:*:*:*

cpe:2.3:a:dataparksearch:dataparksearch:4.42:*:*:*:*:*:*:*

EPSS

Процентиль: 66%

0.00502

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-v5m5-hgcr-q4p6

github

почти 4 года назад