NVD

Id
65088  
Name
CVE-2006-6543  
Description
Multiple SQL injection vulnerabilities in login.asp in AppIntellect SpotLight CRM 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) login (UserName) and possibly (2) password parameter. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-12-13  
Modified Date
2011-03-07  
Seq
2006-6543  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
339900 65088 CVE-2006-6543 2907  View
339901 65088 CVE-2006-6543 ADV-2006-4932  View
339902 65088 CVE-2006-6543 spotlight-login-sql-injection(30835)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
59479 JVNDB-2006-001745 AppIntellect SpotLight CRM の login.asp における SQL インジェクションの脆弱性 AppIntellect SpotLight CRM の login.asp には、SQL インジェクションの脆弱性が存在します。 CVE-2006-6543 22645 CVE-2006-6543 65088 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001745.html 2006-12-13 2012-06-26 View