NVD

Id
64651  
Name
CVE-2006-6090  
Description
Multiple SQL injection vulnerabilities in BaalAsp forum allow remote attackers to execute arbitrary SQL commands via the (1) password parameter to (a) adminlogin.asp, the (2) name or (3) password parameter to (b) userlogin.asp, or the (3) search parameter to search.asp.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-11-24  
Modified Date
2011-03-07  
Seq
2006-6090  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
337467 64651 CVE-2006-6090 http://s-a-p.ca/index.php?page=OurAdvisories&id=35  View
337468 64651 CVE-2006-6090 1913  View
337469 64651 CVE-2006-6090 20061115 BaalAsp forum [login bypass ,injections sql(post), xss(post)]  View
337470 64651 CVE-2006-6090 21111  View
337471 64651 CVE-2006-6090 ADV-2006-4579  View
337472 64651 CVE-2006-6090 baalasp-login-security-bypass(30342)  View
337473 64651 CVE-2006-6090 baalasp-search-sql-injection(30343)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
59346 JVNDB-2006-001612 BaalAsp フォーラムにおける SQL インジェクションの脆弱性 BaalAsp フォーラムには、SQL インジェクションの脆弱性が存在します。 CVE-2006-6090 22192 CVE-2006-6090 64651 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001612.html 2006-11-24 2012-06-26 View