VulnerabilityModified
CVE-2006-3384
SQL injection vulnerability in divers.php in Vincent Leclercq News 5.2 allows remote attackers to execute arbitrary SQL commands via the (1) id and (2) texte parameters.
MEDIUM 5.1EPSS 1.29%
Does this matter?
Lower severity and a low EPSS score (1.29%). Track it; it rarely justifies an emergency change on its own.
Description
SQL injection vulnerability in divers.php in Vincent Leclercq News 5.2 allows remote attackers to execute arbitrary SQL commands via the (1) id and (2) texte parameters.
- CVSS 2.0
- 5.1 MEDIUMAV:N/AC:H/Au:N/C:P/I:P/A:P
- EPSS
- 1.29% probability · 69th percentile
- CISA KEV
- Not listed
- Affected
- vincent leclercq/news
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/20936Vendor Advisory
- http://www.acid-root.new.fr/advisories/news52.txtExploit
- http://www.securityfocus.com/archive/1/438859/100/0/threaded
- http://www.securityfocus.com/bid/18775Exploit
- http://www.vupen.com/english/advisories/2006/2642
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27504
- http://secunia.com/advisories/20936Vendor Advisory
- http://www.acid-root.new.fr/advisories/news52.txtExploit
- http://www.securityfocus.com/archive/1/438859/100/0/threaded
- http://www.securityfocus.com/bid/18775Exploit
- http://www.vupen.com/english/advisories/2006/2642
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27504
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.