Vulnerability-Lookup

CVE-2006-2416 (GCVE-0-2006-2416)

Vulnerability from cvelistv5 – Published: 2006-05-16 10:00 – Updated: 2024-08-07 17:51

Summary

SQL injection vulnerability in class2.php in e107 0.7.2 and earlier allows remote attackers to execute arbitrary SQL commands via a cookie as defined in $pref['cookie_name'].

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

7 references

URL	Tags
http://www.securityfocus.com/archive/1/433938/100…	mailing-listx_refsource_BUGTRAQ
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.vupen.com/english/advisories/2006/1802	vdb-entryx_refsource_VUPEN
http://securityreason.com/securityalert/905	third-party-advisoryx_refsource_SREASON
http://secunia.com/advisories/20089	third-party-advisoryx_refsource_SECUNIA
http://www.osvdb.org/25521	vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/17966	vdb-entryx_refsource_BID

Date Public

2006-05-13 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T17:51:04.584Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20060513 SQL-Injection in e107 allows attacker to become a site admininstrator",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/433938/100/0/threaded"
          },
          {
            "name": "e107-cookie-sql-injection(26434)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26434"
          },
          {
            "name": "ADV-2006-1802",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/1802"
          },
          {
            "name": "905",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/905"
          },
          {
            "name": "20089",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20089"
          },
          {
            "name": "25521",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/25521"
          },
          {
            "name": "17966",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/17966"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-05-13T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "SQL injection vulnerability in class2.php in e107 0.7.2 and earlier allows remote attackers to execute arbitrary SQL commands via a cookie as defined in $pref[\u0027cookie_name\u0027]."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-18T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20060513 SQL-Injection in e107 allows attacker to become a site admininstrator",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/433938/100/0/threaded"
        },
        {
          "name": "e107-cookie-sql-injection(26434)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26434"
        },
        {
          "name": "ADV-2006-1802",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/1802"
        },
        {
          "name": "905",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/905"
        },
        {
          "name": "20089",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20089"
        },
        {
          "name": "25521",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/25521"
        },
        {
          "name": "17966",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/17966"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-2416",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "SQL injection vulnerability in class2.php in e107 0.7.2 and earlier allows remote attackers to execute arbitrary SQL commands via a cookie as defined in $pref[\u0027cookie_name\u0027]."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20060513 SQL-Injection in e107 allows attacker to become a site admininstrator",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/433938/100/0/threaded"
            },
            {
              "name": "e107-cookie-sql-injection(26434)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26434"
            },
            {
              "name": "ADV-2006-1802",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/1802"
            },
            {
              "name": "905",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/905"
            },
            {
              "name": "20089",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/20089"
            },
            {
              "name": "25521",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/25521"
            },
            {
              "name": "17966",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/17966"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-2416",
    "datePublished": "2006-05-16T10:00:00.000Z",
    "dateReserved": "2006-05-15T00:00:00.000Z",
    "dateUpdated": "2024-08-07T17:51:04.584Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2006-2416",
      "date": "2026-09-25",
      "epss": "0.01241",
      "percentile": "0.6792"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:e107:e107:0.6_10:*:*:*:*:*:*:*",
                  "matchCriteriaId": "18C34EB0-7685-4346-81A2-371C1F19F6AD",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:e107:e107:0.6_11:*:*:*:*:*:*:*",
                  "matchCriteriaId": "AB26A2A4-B0DE-4130-AA5F-76D5394A0614",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:e107:e107:0.6_12:*:*:*:*:*:*:*",
                  "matchCriteriaId": "90909932-AD39-4648-8621-5866F0C4AB12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:e107:e107:0.6_13:*:*:*:*:*:*:*",
                  "matchCriteriaId": "37F208E9-3C39-4D00-B1E0-5CD0B315E740",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:e107:e107:0.6_14:*:*:*:*:*:*:*",
                  "matchCriteriaId": "27C7402F-54C9-4FDA-B181-85941DDC7010",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:e107:e107:0.6_15:*:*:*:*:*:*:*",
                  "matchCriteriaId": "061B1AF2-2BA7-49CB-9F8B-91BF5D5B0BF3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:e107:e107:0.6_15a:*:*:*:*:*:*:*",
                  "matchCriteriaId": "4F77F5E4-8636-41F5-9A80-055CC0FC0346",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:e107:e107:0.7:*:*:*:*:*:*:*",
                  "matchCriteriaId": "70AB914E-D616-45D2-A451-1C247B8B6E4C",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:e107:e107:0.7.1:*:*:*:*:*:*:*",
                  "matchCriteriaId": "CA03C1AC-97EA-47ED-9558-A7CA48420AB2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:e107:e107:0.7.2:*:*:*:*:*:*:*",
                  "matchCriteriaId": "32695A82-B042-46B7-9CB4-20F3446E0C9E",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:e107:e107:0.545:*:*:*:*:*:*:*",
                  "matchCriteriaId": "8DDD8B3B-8580-4624-8D77-E3FD97DFF4A6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:e107:e107:0.554:*:*:*:*:*:*:*",
                  "matchCriteriaId": "6454D949-83A2-4F69-92E1-BBCD84F21BC2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:e107:e107:0.555_beta:*:*:*:*:*:*:*",
                  "matchCriteriaId": "CC274184-AD8E-4BC2-BC6A-4E64F354BFFD",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:e107:e107:0.603:*:*:*:*:*:*:*",
                  "matchCriteriaId": "F8692341-8DF2-4943-853A-4AAF1F313914",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:e107:e107:0.616:*:*:*:*:*:*:*",
                  "matchCriteriaId": "B5CB33E9-9AB8-482A-A196-768A2085A49C",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:e107:e107:0.617:*:*:*:*:*:*:*",
                  "matchCriteriaId": "12BD5CAD-0EB8-48F2-AF80-510584A83446",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:e107:e107:0.6171:*:*:*:*:*:*:*",
                  "matchCriteriaId": "AD8CD2A8-C8E8-4A5F-8355-6DF45C9DF45C",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:e107:e107:0.6175:*:*:*:*:*:*:*",
                  "matchCriteriaId": "DF75A192-81C1-4F58-A660-7EFE4F33E58B",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "SQL injection vulnerability in class2.php in e107 0.7.2 and earlier allows remote attackers to execute arbitrary SQL commands via a cookie as defined in $pref[\u0027cookie_name\u0027]."
        }
      ],
      "evaluatorSolution": "Update to version 0.7.4.\r\nhttp://e107.org/edownload.php",
      "id": "CVE-2006-2416",
      "lastModified": "2024-11-21T00:11:16.237",
      "metrics": {
        "cvssMetricV2": [
          {
            "acInsufInfo": false,
            "baseSeverity": "MEDIUM",
            "cvssData": {
              "accessComplexity": "HIGH",
              "accessVector": "NETWORK",
              "authentication": "NONE",
              "availabilityImpact": "PARTIAL",
              "baseScore": 5.1,
              "confidentialityImpact": "PARTIAL",
              "integrityImpact": "PARTIAL",
              "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
              "version": "2.0"
            },
            "exploitabilityScore": 4.9,
            "impactScore": 6.4,
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": true,
            "obtainUserPrivilege": false,
            "source": "nvd@nist.gov",
            "type": "Primary",
            "userInteractionRequired": false
          }
        ]
      },
      "published": "2006-05-16T10:02:00.000",
      "references": [
        {
          "source": "cve@mitre.org",
          "tags": [
            "Patch",
            "Vendor Advisory"
          ],
          "url": "http://secunia.com/advisories/20089"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://securityreason.com/securityalert/905"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Patch"
          ],
          "url": "http://www.osvdb.org/25521"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.securityfocus.com/archive/1/433938/100/0/threaded"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.securityfocus.com/bid/17966"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/1802"
        },
        {
          "source": "cve@mitre.org",
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26434"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Patch",
            "Vendor Advisory"
          ],
          "url": "http://secunia.com/advisories/20089"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://securityreason.com/securityalert/905"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Patch"
          ],
          "url": "http://www.osvdb.org/25521"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.securityfocus.com/archive/1/433938/100/0/threaded"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.securityfocus.com/bid/17966"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/1802"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26434"
        }
      ],
      "sourceIdentifier": "cve@mitre.org",
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "CWE-89"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:e107:e107:0.6_10:*:*:*:*:*:*:*",
                    "matchCriteriaId": "18C34EB0-7685-4346-81A2-371C1F19F6AD",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:e107:e107:0.6_11:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AB26A2A4-B0DE-4130-AA5F-76D5394A0614",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:e107:e107:0.6_12:*:*:*:*:*:*:*",
                    "matchCriteriaId": "90909932-AD39-4648-8621-5866F0C4AB12",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:e107:e107:0.6_13:*:*:*:*:*:*:*",
                    "matchCriteriaId": "37F208E9-3C39-4D00-B1E0-5CD0B315E740",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:e107:e107:0.6_14:*:*:*:*:*:*:*",
                    "matchCriteriaId": "27C7402F-54C9-4FDA-B181-85941DDC7010",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:e107:e107:0.6_15:*:*:*:*:*:*:*",
                    "matchCriteriaId": "061B1AF2-2BA7-49CB-9F8B-91BF5D5B0BF3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:e107:e107:0.6_15a:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4F77F5E4-8636-41F5-9A80-055CC0FC0346",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:e107:e107:0.7:*:*:*:*:*:*:*",
                    "matchCriteriaId": "70AB914E-D616-45D2-A451-1C247B8B6E4C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:e107:e107:0.7.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CA03C1AC-97EA-47ED-9558-A7CA48420AB2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:e107:e107:0.7.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "32695A82-B042-46B7-9CB4-20F3446E0C9E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:e107:e107:0.545:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8DDD8B3B-8580-4624-8D77-E3FD97DFF4A6",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:e107:e107:0.554:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6454D949-83A2-4F69-92E1-BBCD84F21BC2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:e107:e107:0.555_beta:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CC274184-AD8E-4BC2-BC6A-4E64F354BFFD",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:e107:e107:0.603:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F8692341-8DF2-4943-853A-4AAF1F313914",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:e107:e107:0.616:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B5CB33E9-9AB8-482A-A196-768A2085A49C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:e107:e107:0.617:*:*:*:*:*:*:*",
                    "matchCriteriaId": "12BD5CAD-0EB8-48F2-AF80-510584A83446",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:e107:e107:0.6171:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AD8CD2A8-C8E8-4A5F-8355-6DF45C9DF45C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:e107:e107:0.6175:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DF75A192-81C1-4F58-A660-7EFE4F33E58B",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "SQL injection vulnerability in class2.php in e107 0.7.2 and earlier allows remote attackers to execute arbitrary SQL commands via a cookie as defined in $pref[\u0027cookie_name\u0027]."
          }
        ],
        "evaluatorSolution": "Update to version 0.7.4.\r\nhttp://e107.org/edownload.php",
        "id": "CVE-2006-2416",
        "lastModified": "2026-04-16T00:27:16.627",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "HIGH",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 5.1,
                "confidentialityImpact": "PARTIAL",
                "integrityImpact": "PARTIAL",
                "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
                "version": "2.0"
              },
              "exploitabilityScore": 4.9,
              "impactScore": 6.4,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": true,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2006-05-16T10:02:00.000",
        "references": [
          {
            "source": "cve@mitre.org",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/20089"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://securityreason.com/securityalert/905"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Patch"
            ],
            "url": "http://www.osvdb.org/25521"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securityfocus.com/archive/1/433938/100/0/threaded"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securityfocus.com/bid/17966"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/1802"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26434"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/20089"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://securityreason.com/securityalert/905"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch"
            ],
            "url": "http://www.osvdb.org/25521"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/archive/1/433938/100/0/threaded"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/bid/17966"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/1802"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26434"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-89"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    }
  }
}

CERTA-2009-AVI-335

Vulnerability from certfr_avis - Published: - Updated:

Plusieurs vulnérabilités permettant un déni de service à distance ont été corrigées.

Description

Plusieurs vulnérabilités affectant libxml2 ont été corrigées. Elles permettent à une personne malintentionnée distante de provoquer un déni de service à distance au moyen d'un fichier XML spécialement réalisé.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

libxml2 versions 2.5.10, 2.6.16, 2.6.26, 2.6.27 et 2.6.32 et 1.8.17.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

CERTA-2009-AVI-335

Vulnerability from certfr_avis - Published: - Updated:

Plusieurs vulnérabilités permettant un déni de service à distance ont été corrigées.

Description

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

libxml2 versions 2.5.10, 2.6.16, 2.6.26, 2.6.27 et 2.6.32 et 1.8.17.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

FKIE_CVE-2006-2416

Vulnerability from fkie_nvd - Published: 2006-05-16 10:02 - Updated: 2026-06-16 22:24

Severity

Summary

SQL injection vulnerability in class2.php in e107 0.7.2 and earlier allows remote attackers to execute arbitrary SQL commands via a cookie as defined in $pref['cookie_name'].

References

URL	Tags
cve@mitre.org	http://secunia.com/advisories/20089	Patch, Vendor Advisory
cve@mitre.org	http://securityreason.com/securityalert/905
cve@mitre.org	http://www.osvdb.org/25521	Patch
cve@mitre.org	http://www.securityfocus.com/archive/1/433938/100/0/threaded
cve@mitre.org	http://www.securityfocus.com/bid/17966
cve@mitre.org	http://www.vupen.com/english/advisories/2006/1802	Vendor Advisory
cve@mitre.org	https://exchange.xforce.ibmcloud.com/vulnerabilities/26434
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/20089	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://securityreason.com/securityalert/905
af854a3a-2127-422b-91ae-364da2661108	http://www.osvdb.org/25521	Patch
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/archive/1/433938/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/17966
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2006/1802	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/26434

Impacted products

Vendor	Product	Version
e107	e107	0.6_10
e107	e107	0.6_11
e107	e107	0.6_12
e107	e107	0.6_13
e107	e107	0.6_14
e107	e107	0.6_15
e107	e107	0.6_15a
e107	e107	0.7
e107	e107	0.7.1
e107	e107	0.7.2
e107	e107	0.545
e107	e107	0.554
e107	e107	0.555_beta
e107	e107	0.603
e107	e107	0.616
e107	e107	0.617
e107	e107	0.6171
e107	e107	0.6175

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:e107:e107:0.6_10:*:*:*:*:*:*:*",
              "matchCriteriaId": "18C34EB0-7685-4346-81A2-371C1F19F6AD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:e107:e107:0.6_11:*:*:*:*:*:*:*",
              "matchCriteriaId": "AB26A2A4-B0DE-4130-AA5F-76D5394A0614",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:e107:e107:0.6_12:*:*:*:*:*:*:*",
              "matchCriteriaId": "90909932-AD39-4648-8621-5866F0C4AB12",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:e107:e107:0.6_13:*:*:*:*:*:*:*",
              "matchCriteriaId": "37F208E9-3C39-4D00-B1E0-5CD0B315E740",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:e107:e107:0.6_14:*:*:*:*:*:*:*",
              "matchCriteriaId": "27C7402F-54C9-4FDA-B181-85941DDC7010",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:e107:e107:0.6_15:*:*:*:*:*:*:*",
              "matchCriteriaId": "061B1AF2-2BA7-49CB-9F8B-91BF5D5B0BF3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:e107:e107:0.6_15a:*:*:*:*:*:*:*",
              "matchCriteriaId": "4F77F5E4-8636-41F5-9A80-055CC0FC0346",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:e107:e107:0.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "70AB914E-D616-45D2-A451-1C247B8B6E4C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:e107:e107:0.7.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "CA03C1AC-97EA-47ED-9558-A7CA48420AB2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:e107:e107:0.7.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "32695A82-B042-46B7-9CB4-20F3446E0C9E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:e107:e107:0.545:*:*:*:*:*:*:*",
              "matchCriteriaId": "8DDD8B3B-8580-4624-8D77-E3FD97DFF4A6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:e107:e107:0.554:*:*:*:*:*:*:*",
              "matchCriteriaId": "6454D949-83A2-4F69-92E1-BBCD84F21BC2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:e107:e107:0.555_beta:*:*:*:*:*:*:*",
              "matchCriteriaId": "CC274184-AD8E-4BC2-BC6A-4E64F354BFFD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:e107:e107:0.603:*:*:*:*:*:*:*",
              "matchCriteriaId": "F8692341-8DF2-4943-853A-4AAF1F313914",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:e107:e107:0.616:*:*:*:*:*:*:*",
              "matchCriteriaId": "B5CB33E9-9AB8-482A-A196-768A2085A49C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:e107:e107:0.617:*:*:*:*:*:*:*",
              "matchCriteriaId": "12BD5CAD-0EB8-48F2-AF80-510584A83446",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:e107:e107:0.6171:*:*:*:*:*:*:*",
              "matchCriteriaId": "AD8CD2A8-C8E8-4A5F-8355-6DF45C9DF45C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:e107:e107:0.6175:*:*:*:*:*:*:*",
              "matchCriteriaId": "DF75A192-81C1-4F58-A660-7EFE4F33E58B",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "SQL injection vulnerability in class2.php in e107 0.7.2 and earlier allows remote attackers to execute arbitrary SQL commands via a cookie as defined in $pref[\u0027cookie_name\u0027]."
    }
  ],
  "evaluatorSolution": "Update to version 0.7.4.\r\nhttp://e107.org/edownload.php",
  "id": "CVE-2006-2416",
  "lastModified": "2026-06-16T22:24:57.893",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "HIGH",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 5.1,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 4.9,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": true,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2006-05-16T10:02:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/20089"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securityreason.com/securityalert/905"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://www.osvdb.org/25521"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/433938/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/17966"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2006/1802"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26434"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/20089"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securityreason.com/securityalert/905"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://www.osvdb.org/25521"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/433938/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/17966"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2006/1802"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26434"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-89"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-WVMJ-HQFG-93C8

Vulnerability from github – Published: 2022-05-01 06:59 – Updated: 2022-05-01 06:59

Details

SQL injection vulnerability in class2.php in e107 0.7.2 and earlier allows remote attackers to execute arbitrary SQL commands via a cookie as defined in $pref['cookie_name'].

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2006-2416"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-89"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2006-05-16T10:02:00Z",
    "severity": "MODERATE"
  },
  "details": "SQL injection vulnerability in class2.php in e107 0.7.2 and earlier allows remote attackers to execute arbitrary SQL commands via a cookie as defined in $pref[\u0027cookie_name\u0027].",
  "id": "GHSA-wvmj-hqfg-93c8",
  "modified": "2022-05-01T06:59:02Z",
  "published": "2022-05-01T06:59:02Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-2416"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26434"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/20089"
    },
    {
      "type": "WEB",
      "url": "http://securityreason.com/securityalert/905"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/25521"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/433938/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/17966"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2006/1802"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2006-2416

Vulnerability from gsd - Updated: 2023-12-13 01:19

Details

SQL injection vulnerability in class2.php in e107 0.7.2 and earlier allows remote attackers to execute arbitrary SQL commands via a cookie as defined in $pref['cookie_name'].

Aliases

CVE-2006-2416

Aliases

CVE-2006-2416

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2006-2416",
    "description": "SQL injection vulnerability in class2.php in e107 0.7.2 and earlier allows remote attackers to execute arbitrary SQL commands via a cookie as defined in $pref[\u0027cookie_name\u0027].",
    "id": "GSD-2006-2416"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2006-2416"
      ],
      "details": "SQL injection vulnerability in class2.php in e107 0.7.2 and earlier allows remote attackers to execute arbitrary SQL commands via a cookie as defined in $pref[\u0027cookie_name\u0027].",
      "id": "GSD-2006-2416",
      "modified": "2023-12-13T01:19:52.437071Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2006-2416",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "SQL injection vulnerability in class2.php in e107 0.7.2 and earlier allows remote attackers to execute arbitrary SQL commands via a cookie as defined in $pref[\u0027cookie_name\u0027]."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "20060513 SQL-Injection in e107 allows attacker to become a site admininstrator",
            "refsource": "BUGTRAQ",
            "url": "http://www.securityfocus.com/archive/1/433938/100/0/threaded"
          },
          {
            "name": "e107-cookie-sql-injection(26434)",
            "refsource": "XF",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26434"
          },
          {
            "name": "ADV-2006-1802",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2006/1802"
          },
          {
            "name": "905",
            "refsource": "SREASON",
            "url": "http://securityreason.com/securityalert/905"
          },
          {
            "name": "20089",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/20089"
          },
          {
            "name": "25521",
            "refsource": "OSVDB",
            "url": "http://www.osvdb.org/25521"
          },
          {
            "name": "17966",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/17966"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:e107:e107:0.555_beta:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:e107:e107:0.6_10:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:e107:e107:0.603:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:e107:e107:0.616:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:e107:e107:0.545:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:e107:e107:0.554:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:e107:e107:0.6_15:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:e107:e107:0.6_15a:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:e107:e107:0.7.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:e107:e107:0.7.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:e107:e107:0.6_13:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:e107:e107:0.6_14:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:e107:e107:0.6175:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:e107:e107:0.7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:e107:e107:0.6_11:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:e107:e107:0.6_12:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:e107:e107:0.617:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:e107:e107:0.6171:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-2416"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "SQL injection vulnerability in class2.php in e107 0.7.2 and earlier allows remote attackers to execute arbitrary SQL commands via a cookie as defined in $pref[\u0027cookie_name\u0027]."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-89"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "17966",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/17966"
            },
            {
              "name": "20089",
              "refsource": "SECUNIA",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/20089"
            },
            {
              "name": "25521",
              "refsource": "OSVDB",
              "tags": [
                "Patch"
              ],
              "url": "http://www.osvdb.org/25521"
            },
            {
              "name": "905",
              "refsource": "SREASON",
              "tags": [],
              "url": "http://securityreason.com/securityalert/905"
            },
            {
              "name": "ADV-2006-1802",
              "refsource": "VUPEN",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://www.vupen.com/english/advisories/2006/1802"
            },
            {
              "name": "e107-cookie-sql-injection(26434)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26434"
            },
            {
              "name": "20060513 SQL-Injection in e107 allows attacker to become a site admininstrator",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/433938/100/0/threaded"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.1,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 4.9,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": true,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2018-10-18T16:39Z",
      "publishedDate": "2006-05-16T10:02Z"
    }
  }
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2006-2416 (GCVE-0-2006-2416)

CERTA-2009-AVI-335

Description

Solution

CERTA-2009-AVI-335

Description

Solution

FKIE_CVE-2006-2416

GHSA-WVMJ-HQFG-93C8

GSD-2006-2416

Tags

Sightings

Nomenclature

Related by attack behaviour