CVE-2006-2749 in Open Searchable Image Catalogue

Riassunto

di MITRE

SQL injection vulnerability in search.php in Open Searchable Image Catalogue (OSIC) 0.7.0.1 and earlier allows remote attackers to inject arbitrary SQL commands via the (1) txtCustomField and (2) CustomFieldID array parameters.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Prenotare: 01/06/2006
• Divulgazione: 01/06/2006
• Moderazione: accettato
• Voce: VDB-30568
• CPE: pronto
• CWE: CWE-89 (confermato)
• Sfruttamento: Scaricare
• CVSS: 6.5 (VulDB)
• EPSS: 0.01320
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2006-2749
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2006-2749
• CVE Details: https://www.cvedetails.com/cve/CVE-2006-2749/