CVE-2006-2244

critical

Description

Multiple SQL injection vulnerabilities in Web4Future News Portal allow remote attackers to execute arbitrary SQL commands via the ID parameter to (1) comentarii.php or (2) view.php.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/26260

http://www.osvdb.org/25286

http://www.osvdb.org/25285

http://secunia.com/advisories/17880

Details

Source: Mitre, NVD

Published: 2006-05-09

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 6.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.00341