CVE-2006-2123 - Vulnerability Details - OpenCVE

Multiple SQL injection vulnerabilities in the report interface in Network Administration Visualized (NAV) before 3.0.1 allow remote attackers to execute arbitrary SQL commands via unknown vectors.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Network Administration Visualized	Network Administration Visualized

Configuration 1 [-]

cpe:2.3:a:network_administration_visualized:network_administration_visualized:3.0:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://secunia.com/advisories/19849
http://sourceforge.net/project/shownotes.php?release_id=413412
http://www.osvdb.org/25066
http://www.securityfocus.com/bid/17734
http://www.vupen.com/english/advisories/2006/1572
https://exchange.xforce.ibmcloud.com/vulnerabilities/26151

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2006-05-01T22:00:00

Updated: 2024-08-07T17:35:31.391Z

Reserved: 2006-05-01T00:00:00

Link: CVE-2006-2123

Vulnrichment

No data.

NVD

Status : Modified

Published: 2006-05-01T22:06:00.000

Modified: 2024-11-21T00:10:36.717

Link: CVE-2006-2123

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-04-28T00:00:00", "descriptions": [{"lang": "en", "value": "Multiple SQL injection vulnerabilities in the report interface in Network Administration Visualized (NAV) before 3.0.1 allow remote attackers to execute arbitrary SQL commands via unknown vectors."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-19T15:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "19849", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/19849"}, {"name": "17734", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/17734"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://sourceforge.net/project/shownotes.php?release_id=413412"}, {"name": "25066", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/25066"}, {"name": "nav-report-interface-sql-injection(26151)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26151"}, {"name": "ADV-2006-1572", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/1572"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-2123", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple SQL injection vulnerabilities in the report interface in Network Administration Visualized (NAV) before 3.0.1 allow remote attackers to execute arbitrary SQL commands via unknown vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "19849", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/19849"}, {"name": "17734", "refsource": "BID", "url": "http://www.securityfocus.com/bid/17734"}, {"name": "http://sourceforge.net/project/shownotes.php?release_id=413412", "refsource": "CONFIRM", "url": "http://sourceforge.net/project/shownotes.php?release_id=413412"}, {"name": "25066", "refsource": "OSVDB", "url": "http://www.osvdb.org/25066"}, {"name": "nav-report-interface-sql-injection(26151)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26151"}, {"name": "ADV-2006-1572", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/1572"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T17:35:31.391Z"}, "title": "CVE Program Container", "references": [{"name": "19849", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/19849"}, {"name": "17734", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/17734"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://sourceforge.net/project/shownotes.php?release_id=413412"}, {"name": "25066", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/25066"}, {"name": "nav-report-interface-sql-injection(26151)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26151"}, {"name": "ADV-2006-1572", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2006/1572"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-2123", "datePublished": "2006-05-01T22:00:00", "dateReserved": "2006-05-01T00:00:00", "dateUpdated": "2024-08-07T17:35:31.391Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:network_administration_visualized:network_administration_visualized:3.0:*:*:*:*:*:*:*", "matchCriteriaId": "0B9D16CF-4EB4-4266-8E8A-D9F212010873", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Multiple SQL injection vulnerabilities in the report interface in Network Administration Visualized (NAV) before 3.0.1 allow remote attackers to execute arbitrary SQL commands via unknown vectors."}], "id": "CVE-2006-2123", "lastModified": "2024-11-21T00:10:36.717", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 6.4, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2006-05-01T22:06:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/19849"}, {"source": "cve@mitre.org", "url": "http://sourceforge.net/project/shownotes.php?release_id=413412"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/25066"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/17734"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2006/1572"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26151"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/19849"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://sourceforge.net/project/shownotes.php?release_id=413412"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/25066"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/17734"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2006/1572"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26151"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}