CVEブラウザに戻る

CVE-2006-4497

HIGH

7.5

CVSS Severity Score

EPSS Score0.1690%

EPSS Percentile12.26th

Published2006年8月31日

Last Modified2026年4月16日

Vulnerability Description

SQL injection vulnerability in comments.php in IwebNegar 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected Platforms (CPE)

📦

Iwebnegar

Iwebnegar

= 1.1

References & Advisories

🔗 http://securityreason.com/securityalert/1480

🔗 http://www.securityfocus.com/archive/1/444744/100/0/threaded

🔗 http://www.securityfocus.com/bid/19757

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/28665

🔗 http://securityreason.com/securityalert/1480

🔗 http://www.securityfocus.com/archive/1/444744/100/0/threaded

🔗 http://www.securityfocus.com/bid/19757

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/28665

関連する脆弱性情報

CVE-2004-140210.0

SQL injection vulnerability in iWebNegar allows remote attackers to execute arbitrary SQL commands via (1) the string parameter fo...

CVE-2006-44964.3

Cross-site scripting (XSS) vulnerability in comments.php in IwebNegar 1.1 allows remote attackers to inject arbitrary web script o...

CVE-2006-623510.0

A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to ...

CVE-2006-011910.0

Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 have unknown impact and attack vectors, due...