NVD

Id
64831  
Name
CVE-2006-6270  
Description
Multiple SQL injection vulnerabilities in ASPMForum allow remote attackers to execute arbitrary SQL commands via (1) the soruid parameter in forum2.asp, (2) the ak parameter in kullanicilistesi.asp, (3) the kelimeler parameter in aramayap.asp, and (4) the kullaniciadi parameter in giris.asp; and allow remote authenticated users to execute arbitrary SQL commands via (5) the mesajno parameter in mesajkutum.asp. NOTE: the harf parameter in kullanicilistesi.asp and the baslik parameter in forum.asp are already covered by CVE-2005-4141.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-12-04  
Modified Date
2008-09-05  
Seq
2006-6270  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
338528 64831 CVE-2006-6270 1963  View
338529 64831 CVE-2006-6270 20061115 Aspmforum [ multiples injection sql (get&post)]  View
338530 64831 CVE-2006-6270 21113  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60225 JVNDB-2006-002491 ASPMForum における SQL インジェクションの脆弱性 ASPMForum には、SQL インジェクションの脆弱性が存在します。 CVE-2006-6270 22372 CVE-2006-6270 64831 10 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002491.html 2006-12-04 2012-09-25 View