NVD

Id
61416  
Name
CVE-2006-2731  
Description
Multiple SQL injection vulnerabilities in Enigma Haber 4.3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in (a) e_mesaj_yas.asp, (b) edi_haber.asp, and (c) haber_devam.asp; (2) hid parameter in (d) yazdir.asp and (e) yorum.asp, and the (3) e parameter in (f) arsiv.asp. NOTE: with administrator credentials, additional vectors exist including (4) yid parameter to (g) admin/y_admin.asp, (5) bid parameter to (h) admin/reklam_detay.asp, hid parameter to (i) admin/detay_yorum.asp and (j) admin/haber_sil.asp, (6) kid parameter to (k) admin/kategori_d.asp, (7) tur parameter to (l) admin/haber_ekle.asp, (8) s parameter to (m) admin/e_mesaj_yaz.asp, and id parameter to (n) admin/admin_sil.asp.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-06-01  
Modified Date
2013-07-23  
Seq
2006-2731  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
317327 61416 CVE-2006-2731 1003  View
317328 61416 CVE-2006-2731 1016171  View
317329 61416 CVE-2006-2731 http://www.nukedx.com/?getxpl=34  View
317330 61416 CVE-2006-2731 http://www.nukedx.com/?viewdoc=34  View
317331 61416 CVE-2006-2731 20060528 Advisory: Enigma Haber <= 4.3 Multiple Remote SQL InjectionVulnerabilities  View
317332 61416 CVE-2006-2731 18148  View
317333 61416 CVE-2006-2731 ADV-2006-2032  View
317334 61416 CVE-2006-2731 enigmahaber-multiple-sql-injection(26837)  View

Related JVN