Vulnerability Details CVE-2006-3485
Multiple SQL injection vulnerabilities in AstroDog Press Some Chess 1.5-RC2 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly including the gameID parameter in board.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.014
EPSS Ranking 69.8%
CVSS Severity
CVSS v2 Score 7.5
References
- http://secunia.com/advisories/20885
- http://sourceforge.net/forum/forum.php?forum_id=586734
- http://www.osvdb.org/26784
- http://www.securityfocus.com/bid/18745
- http://www.vupen.com/english/advisories/2006/2609
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27489
- http://secunia.com/advisories/20885
- http://sourceforge.net/forum/forum.php?forum_id=586734
- http://www.osvdb.org/26784
- http://www.securityfocus.com/bid/18745
- http://www.vupen.com/english/advisories/2006/2609
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27489
Products affected by CVE-2006-3485
-
cpe:2.3:a:astrodog_press:some_chess:1.5_rc1
-
cpe:2.3:a:astrodog_press:some_chess:1.5_rc2