CVE-2006-2039

Multiple SQL injection vulnerabilities in the osTicket module in Help Center Live before 2.1.0 allow remote attackers to execute arbitrary SQL commands via unknown vectors.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://secunia.com/advisories/19776	Patch Vendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=411859
http://www.securityfocus.com/bid/17676	Patch
http://www.vupen.com/english/advisories/2006/1492
https://exchange.xforce.ibmcloud.com/vulnerabilities/26040

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ubertec:help_center_live:1.0:::::::*
	cpe:2.3:a:ubertec:help_center_live:1.2:::::::*
	cpe:2.3:a:ubertec:help_center_live:1.2.1:::::::*
	cpe:2.3:a:ubertec:help_center_live:1.2.2:::::::*
	cpe:2.3:a:ubertec:help_center_live:1.2.3:::::::*
	cpe:2.3:a:ubertec:help_center_live:1.2.4:::::::*
	cpe:2.3:a:ubertec:help_center_live:1.2.5:::::::*
	cpe:2.3:a:ubertec:help_center_live:1.2.6:::::::*
	cpe:2.3:a:ubertec:help_center_live:1.2.7:::::::*
	cpe:2.3:a:ubertec:help_center_live:1.2.8:::::::*
	cpe:2.3:a:ubertec:help_center_live:2.0:::::::*

History

No history.

Information

Published : 2006-04-26 18:06

Updated : 2017-07-20 01:31

NVD link : CVE-2006-2039

Mitre link : CVE-2006-2039

CVE.ORG link : CVE-2006-2039

JSON object : View

Products Affected

ubertec

help_center_live

CWE

NVD-CWE-Other

{"id": "CVE-2006-2039", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2006-04-26T18:06:00.000", "references": [{"url": "http://secunia.com/advisories/19776", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://sourceforge.net/project/shownotes.php?release_id=411859", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/17676", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2006/1492", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26040", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Multiple SQL injection vulnerabilities in the osTicket module in Help Center Live before 2.1.0 allow remote attackers to execute arbitrary SQL commands via unknown vectors."}], "lastModified": "2017-07-20T01:31:07.973", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ubertec:help_center_live:1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5634AEF9-0DE2-4D6B-9003-E603B5BC9206"}, {"criteria": "cpe:2.3:a:ubertec:help_center_live:1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F02BC707-527B-4566-95CC-9262C2AAC440"}, {"criteria": "cpe:2.3:a:ubertec:help_center_live:1.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0D3BB2BA-B6F5-451C-863F-A4028E040C7D"}, {"criteria": "cpe:2.3:a:ubertec:help_center_live:1.2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0B3B5013-CA5E-419C-A1E6-3C99436B483F"}, {"criteria": "cpe:2.3:a:ubertec:help_center_live:1.2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0D86C037-3188-40C3-A40B-B988223F34E9"}, {"criteria": "cpe:2.3:a:ubertec:help_center_live:1.2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "09B77619-8831-4380-ADB1-F295E456A9F0"}, {"criteria": "cpe:2.3:a:ubertec:help_center_live:1.2.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "891E7564-7B8B-4A4B-B956-A24CA1D7A536"}, {"criteria": "cpe:2.3:a:ubertec:help_center_live:1.2.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3F5E5F8E-BC1B-4737-ADF3-4A0FA00F5AB0"}, {"criteria": "cpe:2.3:a:ubertec:help_center_live:1.2.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C0976DD0-6D62-4109-B692-81E9D401E9BC"}, {"criteria": "cpe:2.3:a:ubertec:help_center_live:1.2.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "59C9347A-1639-434B-A1D7-E280186E717F"}, {"criteria": "cpe:2.3:a:ubertec:help_center_live:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A746A2A4-98C2-41B6-B76C-8887628B48C5"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}