CVE-2006-5635

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2006-5635
SQL injection vulnerability in forum/search.asp in Web Wiz Forums allows remote attackers to execute arbitrary SQL commands via the KW parameter.

7.5 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://securityreason.com/securityalert/1801
http://www.securityfocus.com/archive/1/450034/100/0/threaded
http://www.securityfocus.com/bid/20778 Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/29898
http://securityreason.com/securityalert/1801
http://www.securityfocus.com/archive/1/450034/100/0/threaded
http://www.securityfocus.com/bid/20778 Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/29898
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:web_wiz_forums:web_wiz_forums:6.34:*:*:*:*:*:*:*
cpe:2.3:a:web_wiz_forums:web_wiz_forums:7.0:*:*:*:*:*:*:*
cpe:2.3:a:web_wiz_forums:web_wiz_forums:7.0.1:*:*:*:*:*:*:*
cpe:2.3:a:web_wiz_forums:web_wiz_forums:7.0_beta1:*:*:*:*:*:*:*
cpe:2.3:a:web_wiz_forums:web_wiz_forums:7.5:*:*:*:*:*:*:*
cpe:2.3:a:web_wiz_forums:web_wiz_forums:7.7a:*:*:*:*:*:*:*
cpe:2.3:a:web_wiz_forums:web_wiz_forums:7.7b:*:*:*:*:*:*:*
cpe:2.3:a:web_wiz_forums:web_wiz_forums:7.8:*:*:*:*:*:*:*
cpe:2.3:a:web_wiz_forums:web_wiz_forums:7.9:*:*:*:*:*:*:*
cpe:2.3:a:web_wiz_forums:web_wiz_forums:7.51:*:*:*:*:*:*:*
cpe:2.3:a:web_wiz_forums:web_wiz_forums:7.91:*:*:*:*:*:*:*
cpe:2.3:a:web_wiz_forums:web_wiz_forums:8.0_alpha:*:*:*:*:*:*:*
cpe:2.3:a:web_wiz_forums:web_wiz_forums:8.04:*:*:*:*:*:*:*
History

21 Nov 2024, 00:20

Type Values Removed Values Added
References () http://securityreason.com/securityalert/1801 - () http://securityreason.com/securityalert/1801 -
References () http://www.securityfocus.com/archive/1/450034/100/0/threaded - () http://www.securityfocus.com/archive/1/450034/100/0/threaded -
References () http://www.securityfocus.com/bid/20778 - Exploit () http://www.securityfocus.com/bid/20778 - Exploit
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/29898 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/29898 -
Information

Published : 2006-11-01 00:07

Updated : 2024-11-21 00:20

NVD link : CVE-2006-5635

Mitre link : CVE-2006-5635

CVE.ORG link : CVE-2006-5635

JSON object : View

Products Affected

web_wiz_forums

  • web_wiz_forums
CWE
NVD-CWE-Other