CVE-2006-3111

{"id": "CVE-2006-3111", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2006-06-21T01:02:00.000", "references": [{"url": "http://marc.info/?l=bugtraq&m=115024576618386&w=2", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/20643", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1016315", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/18463", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2006/2359", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27158", "source": "cve@mitre.org"}, {"url": "http://marc.info/?l=bugtraq&m=115024576618386&w=2", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/20643", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://securitytracker.com/id?1016315", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/18463", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2006/2359", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27158", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Multiple SQL injection vulnerabilities in main.php in Chipmailer 1.09 allow remote attackers to execute arbitrary SQL commands via multiple parameters, as demonstrated by (1) anfang, (2) name, (3) mail, (4) anrede, (5) vorname, (6) nachname, (7) gebtag, (8) gebmonat, and (9) gebjahr."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de inyecci\u00f3n SQL en main.php en Chipmailer v1.09 permite a atacantes remotos ejecutar comandos SQL a trav\u00e9s de varios par\u00e1metros, como se demostr\u00f3 por (1) anfang, (2) name, (3) name, (4) Anrede, (5) Vorname, (6) nachname, (7) gebtag, (8) gebmonat y (9) gebjahr."}], "lastModified": "2024-11-21T00:12:50.690", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:chipmailer:chipmailer:1.09:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1E8DCDC9-BB69-4573-88B2-90873DDD5B58"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}