VulnerabilityModified

CVE-2006-5514

SQL injection vulnerability in quiz.php in Web Group Communication Center (WGCC) 0.5.6b and earlier allows remote attackers to execute arbitrary SQL commands via the qzid parameter.

HIGH 7.5EPSS 1.13%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (1.13%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

SQL injection vulnerability in quiz.php in Web Group Communication Center (WGCC) 0.5.6b and earlier allows remote attackers to execute arbitrary SQL commands via the qzid parameter.

CVSS 2.0: 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS: 1.13% probability · 64th percentile
CISA KEV: Not listed
Affected: web group communication center/web group communication center
Source: cve@mitre.org

References

http://www.securityfocus.com/bid/20653
https://exchange.xforce.ibmcloud.com/vulnerabilities/29712
https://www.exploit-db.com/exploits/2604
http://www.securityfocus.com/bid/20653
https://exchange.xforce.ibmcloud.com/vulnerabilities/29712
https://www.exploit-db.com/exploits/2604

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.