NVD

Id
63790  
Name
CVE-2006-5184  
Description
SQL injection vulnerability in PKR Internet Taskjitsu before 2.0.6 allows remote attackers to execute arbitrary SQL commands via the key parameter, when the limit query parameter is set to customerid.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-10-10  
Modified Date
2011-03-07  
Seq
2006-5184  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
332491 63790 CVE-2006-5184 1016978  View
332492 63790 CVE-2006-5184 20332  View
332493 63790 CVE-2006-5184 ADV-2006-3903  View
332494 63790 CVE-2006-5184 https://www.pkrinternet.com/download/RELEASE-NOTES.txt  View
332495 63790 CVE-2006-5184 https://www.pkrinternet.com/taskjitsu/task/3517  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61001 JVNDB-2006-003267 PKR Internet Taskjitsu における SQL インジェクションの脆弱性 PKR Internet Taskjitsu には、limit query パラメータが customerid に設定されている際、SQL インジェクションの脆弱性が存在します。 CVE-2006-5184 21286 CVE-2006-5184 63790 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003267.html 2006-09-27 2012-12-20 View