CVE-2006-6478

Multiple SQL injection vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in (a)…

published December 12, 2006

CVSS

—

EPSS

11%

Percentile

95.8

In the wild

Unconfirmed

What it is

Multiple SQL injection vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in (a) email.php, the (2) no parameter in (b) voirannonce.php, the (3) idmembre parameter in (c) admin/admin_membre/fiche_membre.php, and the (4) idannonce parameter in (d) admin/admin_annonce/okvalannonce.php and (e) admin/admin_annonce/changeannonce.php.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.10525 · 95.8th percentile
Published: 2006-12-12T00:00Z

EPSS history

Timeline

12 DEC 00:00Z
Multiple SQL injection vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in (a)…
cvelistv5