Vulnerability Details CVE-2006-0809
Multiple SQL injection vulnerabilities in Skate Board 0.9 allow remote attackers to execute arbitrary SQL commands via the (1) usern parameter in (a) sendpass.php, and the (2) usern and (3) passwd parameters and (4) sf_cookie cookie in (b) login.php and (c) logged.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.015
EPSS Ranking 80.6%
CVSS Severity
CVSS v2 Score 7.5
References
- http://evuln.com/vulns/84/summary.html
- http://secunia.com/advisories/18978
- http://securityreason.com/securityalert/540
- http://www.osvdb.org/23301
- http://www.osvdb.org/23302
- http://www.osvdb.org/23303
- http://www.securityfocus.com/archive/1/426658/30/0/threaded
- http://www.securityfocus.com/bid/16936
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24778
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24779
- http://evuln.com/vulns/84/summary.html
- http://secunia.com/advisories/18978
- http://securityreason.com/securityalert/540
- http://www.osvdb.org/23301
- http://www.osvdb.org/23302
- http://www.osvdb.org/23303
- http://www.securityfocus.com/archive/1/426658/30/0/threaded
- http://www.securityfocus.com/bid/16936
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24778
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24779
Products affected by CVE-2006-0809
-
cpe:2.3:a:skate_board:skate_board:0.9