返回 CVE 浏览器

CVE-2006-4497

HIGH

7.5

CVSS Severity Score

EPSS Score0.1690%

EPSS Percentile12.26th

Published2006年8月31日

Last Modified2026年4月16日

Vulnerability Description

SQL injection vulnerability in comments.php in IwebNegar 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected Platforms (CPE)

📦

Iwebnegar

Iwebnegar

= 1.1

References & Advisories

🔗 http://securityreason.com/securityalert/1480

🔗 http://www.securityfocus.com/archive/1/444744/100/0/threaded

🔗 http://www.securityfocus.com/bid/19757

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/28665

🔗 http://securityreason.com/securityalert/1480

🔗 http://www.securityfocus.com/archive/1/444744/100/0/threaded

🔗 http://www.securityfocus.com/bid/19757

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/28665

相关漏洞威胁

CVE-2004-140210.0

SQL injection vulnerability in iWebNegar allows remote attackers to execute arbitrary SQL commands via (1) the string parameter fo...

CVE-2006-44964.3

Cross-site scripting (XSS) vulnerability in comments.php in IwebNegar 1.1 allows remote attackers to inject arbitrary web script o...

CVE-2006-446110.0

Paessler IPCheck Server Monitor before 5.3.3.639/640 does not properly implement a "list of acceptable host IP addresses in the pr...

CVE-2006-623510.0

A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to ...