CVE-2006-3244

critical

Description

Multiple SQL injection vulnerabilities in Anthill 0.2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) order parameter in buglist.php and the (2) bug parameter in query.php.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/27373

http://www.vupen.com/english/advisories/2006/2529

http://www.securityfocus.com/bid/18661

http://secunia.com/advisories/20838

http://pridels0.blogspot.com/2006/06/anthill-sql-injection-vuln.html

Details

Source: Mitre, NVD

Published: 2006-06-27

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 5.1

Vector: CVSS2#AV:N/AC:H/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.00596

Detections

Analytics