CVE-2006-2980
Severity Score
7.5
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
SQL injection vulnerability in block_forum_topic_new.php in ViArt Shop Free 2.5.5, and possibly other distributions including Light, Standard, and Enterprise, might allow remote attackers to execute arbitrary SQL commands via unknown vectors, probably involving the forum_id parameter.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2006-06-12 CVE Reserved
- 2006-06-12 CVE Published
- 2023-11-05 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| http://www.attrition.org/pipermail/vim/2006-June/000846.html | Mailing List | |
| http://www.codetosell.com/downloads/xss_fix.zip | Url Repurposed | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/27684 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Viart Ltd Search vendor "Viart Ltd" | Viart Shop Free Search vendor "Viart Ltd" for product "Viart Shop Free" | 2.5.5_enterprise Search vendor "Viart Ltd" for product "Viart Shop Free" and version "2.5.5_enterprise" | - |
Affected
| ||||||
| Viart Ltd Search vendor "Viart Ltd" | Viart Shop Free Search vendor "Viart Ltd" for product "Viart Shop Free" | 2.5.5_light Search vendor "Viart Ltd" for product "Viart Shop Free" and version "2.5.5_light" | - |
Affected
| ||||||
| Viart Ltd Search vendor "Viart Ltd" | Viart Shop Free Search vendor "Viart Ltd" for product "Viart Shop Free" | 2.5.5_standard Search vendor "Viart Ltd" for product "Viart Shop Free" and version "2.5.5_standard" | - |
Affected
| ||||||