VulnerabilityModified

CVE-2006-0313

HIGH 7.5EPSS 1.96%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (1.96%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Multiple SQL injection vulnerabilities in PDFdirectory before 1.0 allow remote attackers to execute arbitrary SQL commands via multiple unspecified vectors involving (1) util.php, (2) userpref.php, (3) user.php, (4) uploadfrm.php, (5) title.php, (6) team.php, (7) stats.php, (8) page.php, (9) org.php, (10) member.php, (11) index.php, (12) group.php, or (13) anniv.php.

CVSS 2.0: 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS: 1.96% probability · 79th percentile
CISA KEV: Not listed
Affected: pdfdirectory/pdfdirectory
Source: cve@mitre.org

References

http://secunia.com/advisories/18459Patch, Vendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=382411&group_id=122682Patch
http://www.osvdb.org/22403Patch
http://www.osvdb.org/22404Patch
http://www.osvdb.org/22405Patch
http://www.osvdb.org/22406Patch
http://www.osvdb.org/22407Patch
http://www.osvdb.org/22408Patch
http://www.osvdb.org/22409Patch
http://www.osvdb.org/22410Patch
http://www.osvdb.org/22411Patch
http://www.osvdb.org/22412Patch
http://www.osvdb.org/22413Patch
http://www.osvdb.org/22414Patch
http://www.osvdb.org/22415Patch
http://www.securityfocus.com/bid/16273Patch
http://www.vupen.com/english/advisories/2006/0231
http://secunia.com/advisories/18459Patch, Vendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=382411&group_id=122682Patch
http://www.osvdb.org/22403Patch
http://www.osvdb.org/22404Patch
http://www.osvdb.org/22405Patch
http://www.osvdb.org/22406Patch
http://www.osvdb.org/22407Patch
http://www.osvdb.org/22408Patch
http://www.osvdb.org/22409Patch
http://www.osvdb.org/22410Patch
http://www.osvdb.org/22411Patch
http://www.osvdb.org/22412Patch
http://www.osvdb.org/22413Patch

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.