CVE-2006-6147

Опубликовано: 28 нояб. 2006

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Multiple SQL injection vulnerabilities in JiRos Links Manager allow remote attackers to execute arbitrary SQL commands via the (1) LinkID parameter to openlink.asp or the (2) CategoryID parameter to viewlinks.asp.

Ссылки

http://secunia.com/advisories/23063
Vendor Advisory
http://securitytracker.com/id?1017280
Vendor Advisory
http://www.frsirt.com/english/reference-2006-4664-1.php
Vendor Advisory
http://www.securityfocus.com/archive/1/452265/100/0/threaded
http://www.securityfocus.com/bid/21226
Exploit
Vendor Advisory
http://www.vupen.com/english/advisories/2006/4664
https://exchange.xforce.ibmcloud.com/vulnerabilities/30462
http://secunia.com/advisories/23063
Vendor Advisory
http://securitytracker.com/id?1017280
Vendor Advisory
http://www.frsirt.com/english/reference-2006-4664-1.php
Vendor Advisory
http://www.securityfocus.com/archive/1/452265/100/0/threaded
http://www.securityfocus.com/bid/21226
Exploit
Vendor Advisory
http://www.vupen.com/english/advisories/2006/4664
https://exchange.xforce.ibmcloud.com/vulnerabilities/30462

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:jiros:links_manager:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 80%

0.01357

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-9x65-p4j2-wx34

github

почти 4 года назад