Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2006-6354
Modified
More InfoOfficial Page
Source-cve@mitre.org
View Known Exploited Vulnerability (KEV) details
Published At-07 Dec, 2006 | 01:28
Updated At-17 Oct, 2018 | 21:47

Multiple SQL injection vulnerabilities in detail.asp in DuWare DuNews allow remote attackers to execute arbitrary SQL commands via the (1) iNews, (2) iType, or (3) Action parameter. NOTE: the iType parameter in type.asp is covered by CVE-2005-3976.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary2.07.5HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
CPE Matches
duware
duware
>>duamazon>>3.0
cpe:2.3:a:duware:duamazon:3.0:*:*:*:*:*:*:*
duware
duware
>>duamazon>>3.1
cpe:2.3:a:duware:duamazon:3.1:*:*:*:*:*:*:*
duware
duware
>>duarticle>>1.0
cpe:2.3:a:duware:duarticle:1.0:*:*:*:*:*:*:*
duware
duware
>>duarticle>>1.1
cpe:2.3:a:duware:duarticle:1.1:*:*:*:*:*:*:*
duware
duware
>>duclassified>>4.0
cpe:2.3:a:duware:duclassified:4.0:*:*:*:*:*:*:*
duware
duware
>>duclassified>>4.1
cpe:2.3:a:duware:duclassified:4.1:*:*:*:*:*:*:*
duware
duware
>>duclassified>>4.2
cpe:2.3:a:duware:duclassified:4.2:*:*:*:*:*:*:*
duware
duware
>>dudirectory>>3.0
cpe:2.3:a:duware:dudirectory:3.0:*:*:*:*:*:*:*
duware
duware
>>dudirectory>>3.1
cpe:2.3:a:duware:dudirectory:3.1:*:*:*:*:*:*:*
duware
duware
>>dudirectory_pro>>3.0
cpe:2.3:a:duware:dudirectory_pro:3.0:*:*:*:*:*:*:*
duware
duware
>>dudirectory_pro>>3.1
cpe:2.3:a:duware:dudirectory_pro:3.1:*:*:*:*:*:*:*
duware
duware
>>dudirectory_pro_sql>>3.0
cpe:2.3:a:duware:dudirectory_pro_sql:3.0:*:*:*:*:*:*:*
duware
duware
>>dudirectory_pro_sql>>3.1
cpe:2.3:a:duware:dudirectory_pro_sql:3.1:*:*:*:*:*:*:*
duware
duware
>>dudownload>>1.0
cpe:2.3:a:duware:dudownload:1.0:*:*:*:*:*:*:*
duware
duware
>>dudownload>>1.1
cpe:2.3:a:duware:dudownload:1.1:*:*:*:*:*:*:*
duware
duware
>>dugallery>>3.0
cpe:2.3:a:duware:dugallery:3.0:*:*:*:*:*:*:*
duware
duware
>>dugallery>>3.1
cpe:2.3:a:duware:dugallery:3.1:*:*:*:*:*:*:*
duware
duware
>>dugallery>>3.2
cpe:2.3:a:duware:dugallery:3.2:*:*:*:*:*:*:*
duware
duware
>>dugallery>>3.3
cpe:2.3:a:duware:dugallery:3.3:*:*:*:*:*:*:*
duware
duware
>>dunews>>1.0
cpe:2.3:a:duware:dunews:1.0:*:*:*:*:*:*:*
duware
duware
>>dunews>>1.1
cpe:2.3:a:duware:dunews:1.1:*:*:*:*:*:*:*
duware
duware
>>dupaypal>>3.0
cpe:2.3:a:duware:dupaypal:3.0:*:*:*:*:*:*:*
duware
duware
>>dupaypal>>3.1
cpe:2.3:a:duware:dupaypal:3.1:*:*:*:*:*:*:*
duware
duware
>>dupaypal_pro>>3.0
cpe:2.3:a:duware:dupaypal_pro:3.0:*:*:*:*:*:*:*
duware
duware
>>dupaypal_pro>>3.1
cpe:2.3:a:duware:dupaypal_pro:3.1:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
NVD-CWE-OtherPrimarynvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
http://secunia.com/advisories/23228cve@mitre.org
Patch
Vendor Advisory
http://securityreason.com/securityalert/1996cve@mitre.org
N/A
http://www.aria-security.com/forum/showthread.php?t=61cve@mitre.org
Exploit
http://www.securityfocus.com/archive/1/453317/100/0/threadedcve@mitre.org
N/A
http://www.securityfocus.com/bid/15681cve@mitre.org
N/A
http://www.vupen.com/english/advisories/2006/4834cve@mitre.org
N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/30673cve@mitre.org
N/A
Change History
0Changes found
Details not found