CVE-2006-0570

Published Feb 7, 2006

Last updated 6 years ago

Overview

Description: Multiple SQL injection vulnerabilities in phpstatus 1.0, when gpc_magic_quotes is disabled, allow remote attackers to execute arbitrary SQL commands and bypass authentication via (1) the username parameter in check.php and (2) unknown attack vectors in the administrative interface.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.5
Impact score: 6.4
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:hinton_design:phpstatus:1.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "14A408DF-A4A4-4E23-81AF-944375F62D12"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References