VulnerabilityModified
CVE-2006-2123
Multiple SQL injection vulnerabilities in the report interface in Network Administration Visualized (NAV) before 3.0.1 allow remote attackers to execute arbitrary SQL commands via unknown vectors.
MEDIUM 6.4EPSS 1.27%
Does this matter?
Lower severity and a low EPSS score (1.27%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple SQL injection vulnerabilities in the report interface in Network Administration Visualized (NAV) before 3.0.1 allow remote attackers to execute arbitrary SQL commands via unknown vectors.
- CVSS 2.0
- 6.4 MEDIUMAV:N/AC:L/Au:N/C:P/I:P/A:N
- EPSS
- 1.27% probability · 68th percentile
- CISA KEV
- Not listed
- Affected
- network administration visualized/network administration visualized
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/19849Patch, Vendor Advisory
- http://sourceforge.net/project/shownotes.php?release_id=413412
- http://www.osvdb.org/25066
- http://www.securityfocus.com/bid/17734Patch
- http://www.vupen.com/english/advisories/2006/1572
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26151
- http://secunia.com/advisories/19849Patch, Vendor Advisory
- http://sourceforge.net/project/shownotes.php?release_id=413412
- http://www.osvdb.org/25066
- http://www.securityfocus.com/bid/17734Patch
- http://www.vupen.com/english/advisories/2006/1572
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26151
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.