NVD

Id
62395  
Name
CVE-2006-3727  
Description
Multiple SQL injection vulnerabilities in Eskolar CMS 0.9.0.0 allow remote attackers to execute arbitrary SQL commands via the (1) gr_1_id, (2) gr_2_id, (3) gr_3_id, and (4) doc_id parameters in (a) index.php; the (5) uid and (6) pwd parameters in (b) php/esa.php; and possibly other vectors related to files in php/lib/ including (c) del.php, (d) download_backup.php, (e) navig.php, (f) restore.php, (g) set_12.php, (h) set_14.php, and (i) upd_doc.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-07-21  
Modified Date
2011-03-07  
Seq
2006-3727  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
323551 62395 CVE-2006-3727 2032  View
323552 62395 CVE-2006-3727 19045  View
323553 62395 CVE-2006-3727 ADV-2006-2869  View
323554 62395 CVE-2006-3727 eskolar-index-sql-injection(27808)  View
323555 62395 CVE-2006-3727 eskolar-phpesa-sql-injection(27809)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60566 JVNDB-2006-002832 Eskolar CMS における SQL インジェクションの脆弱性 Eskolar CMS は、以下を含む php/lib 内のファイルに関する処理に不備があるため、SQL インジェクションの脆弱性が存在します。 CVE-2006-3727 19829 CVE-2006-3727 62395 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002832.html 2006-07-21 2012-12-20 View