CVE-2006-6478
HIGH 7.5EPSS 10.5%
Multiple SQL injection vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in (a) email.php, the (2) no parameter in (b) voirannonce.php, the (3) idmembre parameter in (c) admin/admin_membre/fiche_membre.php, and the (4) idannonce parameter in (d) admin/admin_annonce/okvalannonce.php and (e) admin/admin_annonce/changeannonce.php.
- CVSS v2.0
- 7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P - EPSS
- 10.53% chance of exploitation in the next 30 days, 95th percentile
- Published
- 2006-12-12
- Updated
- 2024-08-07
ExploitDB entries (3)
- https://www.exploit-db.com/exploits/29253
- https://www.exploit-db.com/exploits/29252
- https://www.exploit-db.com/exploits/29246