CVE-2006-6842 - SQL injection vulnerability in admin/admin_acronyms.php in the Acronym Mod 0.9.5 for phpBB2 Plus 1.5

CVE-2006-6842

Summary

SQL injection vulnerability in admin/admin_acronyms.php in the Acronym Mod 0.9.5 for phpBB2 Plus 1.53 allows remote attackers to execute arbitrary SQL commands via the id parameter.

References

http://www.securityfocus.com/bid/21805
http://www.vupen.com/english/advisories/2007/0009
https://exchange.xforce.ibmcloud.com/vulnerabilities/31129
https://www.exploit-db.com/exploits/3033

Vulnerable Configurations

cpe:2.3:a:codemonkeyx:acronym_mod:0.9.5:*:*:*:*:*:*:*
cpe:2.3:a:codemonkeyx:acronym_mod:0.9.5:*:*:*:*:*:*:*

CVSS

Base:	7.5 (as of 19-10-2017 - 01:29)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:P/A:P

refmap via4

bid	21805
exploit-db	3033
vupen	ADV-2007-0009
xf	acronym-adminacronyms-sql-injection(31129)

Last major update

19-10-2017 - 01:29

Published

31-12-2006 - 05:00

Last modified

19-10-2017 - 01:29