CVE-2006-0545

SQL injection vulnerability in showflat.php in Groupee (formerly known as Infopop) UBB.threads 6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Number parameter.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://archives.neohapsis.com/archives/bugtraq/2006-03/0494.html
http://securitytracker.com/id?1015549	Exploit
http://www.cyberlords.net/advisories/cl_ubb.txt
http://www.osvdb.org/22808
http://www.securityfocus.com/bid/16520
https://exchange.xforce.ibmcloud.com/vulnerabilities/24381

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ubbcentral:ubb.threads:6.0:::::::*
	cpe:2.3:a:ubbcentral:ubb.threads:6.0.1:::::::*
	cpe:2.3:a:ubbcentral:ubb.threads:6.0.2:::::::*
	cpe:2.3:a:ubbcentral:ubb.threads:6.0.3:::::::*
	cpe:2.3:a:ubbcentral:ubb.threads:6.1:::::::*
	cpe:2.3:a:ubbcentral:ubb.threads:6.1.1:::::::*
	cpe:2.3:a:ubbcentral:ubb.threads:6.2:::::::*
	cpe:2.3:a:ubbcentral:ubb.threads:6.2.1:::::::*
	cpe:2.3:a:ubbcentral:ubb.threads:6.2.2:::::::*
	cpe:2.3:a:ubbcentral:ubb.threads:6.2.3:::::::*
	cpe:2.3:a:ubbcentral:ubb.threads:6.3:::::::*

History

No history.

Information

Published : 2006-02-04 02:02

Updated : 2017-07-20 01:29

NVD link : CVE-2006-0545

Mitre link : CVE-2006-0545

CVE.ORG link : CVE-2006-0545

JSON object : View

Products Affected

ubbcentral

ubb.threads

CWE

NVD-CWE-Other

{"id": "CVE-2006-0545", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2006-02-04T02:02:00.000", "references": [{"url": "http://archives.neohapsis.com/archives/bugtraq/2006-03/0494.html", "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1015549", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.cyberlords.net/advisories/cl_ubb.txt", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/22808", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/16520", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24381", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "SQL injection vulnerability in showflat.php in Groupee (formerly known as Infopop) UBB.threads 6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Number parameter."}], "lastModified": "2017-07-20T01:29:51.940", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ubbcentral:ubb.threads:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "65952A65-78AC-4239-9D15-BA850AF64598"}, {"criteria": "cpe:2.3:a:ubbcentral:ubb.threads:6.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9DFF7A22-25CB-4D5E-BA1B-E10E407DA515"}, {"criteria": "cpe:2.3:a:ubbcentral:ubb.threads:6.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "094040BF-4C59-4266-9683-76C59D332F16"}, {"criteria": "cpe:2.3:a:ubbcentral:ubb.threads:6.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F02151FE-89D6-4FB5-82E2-50A2F1046341"}, {"criteria": "cpe:2.3:a:ubbcentral:ubb.threads:6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "11E1B205-864C-4FAD-8891-12FBAC0E090F"}, {"criteria": "cpe:2.3:a:ubbcentral:ubb.threads:6.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "047CFF77-7616-41A2-9879-EA0E33B4922C"}, {"criteria": "cpe:2.3:a:ubbcentral:ubb.threads:6.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6B321E2E-4AD3-4236-918A-F87804990FCC"}, {"criteria": "cpe:2.3:a:ubbcentral:ubb.threads:6.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2232ED2E-0323-4DBB-8540-98BD52750025"}, {"criteria": "cpe:2.3:a:ubbcentral:ubb.threads:6.2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "895472F7-D0F8-4C6A-95C6-15963652ABEF"}, {"criteria": "cpe:2.3:a:ubbcentral:ubb.threads:6.2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "858FAA03-DD05-472D-9F67-3089262F5E82"}, {"criteria": "cpe:2.3:a:ubbcentral:ubb.threads:6.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8CAAB6C4-770C-4BC3-9D72-FDA7FD223CF0"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}