VDB
CVE-2006-6358
CVE-2006-6358
PUBLISHED
CVSS 7.5 HIGH
SQL injection vulnerability in the login function in auth.inc in Stefan Frech online-bookmarks 0.6.12 allows remote attackers to execute arbitrary SQL commands via the (1) username and possibly the (2) password parameter. NOTE: some of these details are obtained from third party information.
EPSS 1.31% · 70.4th percentile
Risk Scores
CVSS 2.0
7.5
EPSS Score
1.31%
70.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| stefan_frech | online-bookmarks | 0.6.12 |
| n/a | n/a | n/a |
Timeline
- Dec 7, 2006 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 22, 2022 EPSS Score
- Jul 15, 2022 EPSS Score
- Sep 7, 2022 EPSS Score
- Oct 30, 2022 EPSS Score
- Dec 23, 2022 EPSS Score
- Feb 14, 2023 EPSS Score
- Apr 9, 2023 EPSS Score
- Jun 1, 2023 EPSS Score
- Jul 24, 2023 EPSS Score
References
- 23169 third-party-advisory
- ADV-2006-4849 vdb
- http://www.vigilon.com/resources/120406.html url
- 21422 vdb
- 20061203 Online BookMarks Multiple SQL Injection/XSS Vulnerabilities mailing-list
- onlinebookmarks-login-sql-injection(30696) vdb
- https://nvd.nist.gov/vuln/detail/CVE-2006-6358 advisory