CVE-2006-6398

{"id": "CVE-2006-6398", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2006-12-08T01:28:00.000", "references": [{"url": "http://secunia.com/advisories/22840", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/453462/100/0/threaded", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Multiple SQL injection vulnerabilities in Superfreaker Studios UPublisher 1.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors in (a) sendarticle.asp and (b) printarticle.asp, and the ID parameter to (c) index.asp and (d) preferences.asp, different vectors than CVE-2006-5888."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de inyecci\u00f3n SQL en Superfreaker Studios UPublisher 1.0 permite a atacantes remotos ejecutar comandos SQL de su elecci\u00f3n mediante vectores no especificados en (a) sendarticle.asp y (b) printarticle.asp, y el par\u00e1metro ID a (c) index.asp y (d) preferences.asp, vectores diferentes que CVE-2006-5888."}], "lastModified": "2018-10-17T21:48:01.753", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:superfreaker_studios:upublisher:1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6167E743-52F4-43ED-AE07-7DE9502C03C1"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}