CVE-2006-2718

JIWA Financials 6.4.14 passes a Microsoft SQL Server account's username and password, and the name of a data source, to a Crystal Reports .rpt file, which…

published June 1, 2006

CVSS
—
EPSS
2%
Percentile
74.7
In the wild
Unconfirmed
What it is

JIWA Financials 6.4.14 passes a Microsoft SQL Server account's username and password, and the name of a data source, to a Crystal Reports .rpt file, which allows remote authenticated users to execute certain standard stored procedures by referencing them in a user-written .rpt file, as demonstrated by using a stored procedure that provides the username and cleartext password of every account.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01538 · 74.7th percentile
Published
2006-06-01T01:00Z
EPSS history
Timeline
  • 01 JUN 01:00Z
    JIWA Financials 6.4.14 passes a Microsoft SQL Server account's username and password, and the name of a data source, to a Crystal Reports .rpt file, which…
    cvelistv5