NVD

Id
61427  
Name
CVE-2006-2742  
Description
SQL injection vulnerability in Drupal 4.6.x before 4.6.7 and 4.7.0 allows remote attackers to execute arbitrary SQL commands via the (1) count and (2) from variables to (a) database.mysql.inc, (b) database.pgsql.inc, and (c) database.mysqli.inc.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-06-01  
Modified Date
2011-03-07  
Seq
2006-2742  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
317408 61427 CVE-2006-2742 http://drupal.org/node/65357  View
317409 61427 CVE-2006-2742 DSA-1125  View
317410 61427 CVE-2006-2742 20060602 [DRUPAL-SA-2006-005] Drupal 4.6.7 / 4.7.1 fixes SQL injection issue  View
317411 61427 CVE-2006-2742 18245  View
317412 61427 CVE-2006-2742 ADV-2006-1975  View
317413 61427 CVE-2006-2742 drupal-database-sql-injection(26654)  View

Related JVN