CVE-2006-6090

Multiple SQL injection vulnerabilities in BaalAsp forum allow remote attackers to execute arbitrary SQL commands via the (1) password parameter to (a) adminlogin.asp, the (2) name or (3) password parameter to (b) userlogin.asp, or the (3) search parameter to search.asp.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://s-a-p.ca/index.php?page=OurAdvisories&id=35	Exploit Vendor Advisory
http://www.securityfocus.com/bid/21111	Exploit
http://secunia.com/advisories/22943	Vendor Advisory
http://securityreason.com/securityalert/1913
http://www.vupen.com/english/advisories/2006/4579
https://exchange.xforce.ibmcloud.com/vulnerabilities/30343
https://exchange.xforce.ibmcloud.com/vulnerabilities/30342
http://www.securityfocus.com/archive/1/451846/100/100/threaded

Configurations

Configuration 1 (hide)

cpe:2.3:a:baalasp:smart_form_portal:*:*:*:*:*:*:*:*

Information

Published : 2006-11-24 18:07

Updated : 2018-10-17 21:46

NVD link : CVE-2006-6090

Mitre link : CVE-2006-6090

JSON object : View

Products Affected

baalasp

smart_form_portal

CWE

NVD-CWE-Other

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://s-a-p.ca/index.php?page=OurAdvisories&id=35", "name": "http://s-a-p.ca/index.php?page=OurAdvisories&id=35", "tags": ["Exploit", "Vendor Advisory"], "refsource": "MISC"}, {"url": "http://www.securityfocus.com/bid/21111", "name": "21111", "tags": ["Exploit"], "refsource": "BID"}, {"url": "http://secunia.com/advisories/22943", "name": "22943", "tags": ["Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://securityreason.com/securityalert/1913", "name": "1913", "tags": [], "refsource": "SREASON"}, {"url": "http://www.vupen.com/english/advisories/2006/4579", "name": "ADV-2006-4579", "tags": [], "refsource": "VUPEN"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30343", "name": "baalasp-search-sql-injection(30343)", "tags": [], "refsource": "XF"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30342", "name": "baalasp-login-security-bypass(30342)", "tags": [], "refsource": "XF"}, {"url": "http://www.securityfocus.com/archive/1/451846/100/100/threaded", "name": "20061115 BaalAsp forum [login bypass ,injections sql(post), xss(post)]", "tags": [], "refsource": "BUGTRAQ"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Multiple SQL injection vulnerabilities in BaalAsp forum allow remote attackers to execute arbitrary SQL commands via the (1) password parameter to (a) adminlogin.asp, the (2) name or (3) password parameter to (b) userlogin.asp, or the (3) search parameter to search.asp."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2006-6090", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "HIGH", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}}, "publishedDate": "2006-11-24T18:07Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:baalasp:smart_form_portal:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2018-10-17T21:46Z"}