NVD

Id
62986  
Name
CVE-2006-4347  
Description
SQL injection vulnerability in user logon authentication request handling in Cool_CoolD.exe in Cool Manager 5.0 (5,60,90,28) and Cool Messenger Office/School Server 5.5 (5,65,12,13) allows remote attackers to execute arbitrary SQL commands via the username field.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-08-24  
Modified Date
2011-03-07  
Seq
2006-4347  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
327946 62986 CVE-2006-4347 20060822 [vuln.sg] Cool Messenger Server SQL Injection Vulnerability  View
327947 62986 CVE-2006-4347 http://vuln.sg/coolmessenger55-en.html  View
327948 62986 CVE-2006-4347 19669  View
327949 62986 CVE-2006-4347 ADV-2006-3362  View
327950 62986 CVE-2006-4347 cool-cool-sql-injection(28531)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
59732 JVNDB-2006-001998 Cool Manager の Cool_CoolD.exe における SQL インジェクションの脆弱性 Cool Manager および Cool Messenger Office/School Server の Cool_CoolD.exe のユーザログイン認証要求処理には、SQL インジェクションの脆弱性が存在します。 CVE-2006-4347 20449 CVE-2006-4347 62986 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001998.html 2006-08-24 2012-09-25 View