Vulnerability Details : CVE-2006-4043

index.php in myWebland myBloggie 2.1.4 and earlier allows remote attackers to obtain sensitive information via a query that only specifies the viewdate mode, which reveals the table prefix in a SQL error message.

Published 2006-08-09 23:04:00

Updated 2018-10-17 21:33:04

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2006-4043

Probability of exploitation activity in the next 30 days: 0.75%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 78 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2006-4043

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N	10.0	2.9	[email protected]
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None

References for CVE-2006-4043

Products affected by CVE-2006-4043

Mywebland » Mybloggie
Versions up to, including, (<=) 2.1.4
cpe:2.3:a:mywebland:mybloggie:*:*:*:*:*:*:*:*
Matching versions
Mywebland » Mybloggie » Version: 2.1.1
cpe:2.3:a:mywebland:mybloggie:2.1.1:*:*:*:*:*:*:*
Matching versions
Mywebland » Mybloggie » Version: 2.1.2
cpe:2.3:a:mywebland:mybloggie:2.1.2:*:*:*:*:*:*:*
Matching versions
Mywebland » Mybloggie » Version: 2.1.3
cpe:2.3:a:mywebland:mybloggie:2.1.3:*:*:*:*:*:*:*
Matching versions
Mywebland » Mybloggie » Version: 2.1.3 Beta
cpe:2.3:a:mywebland:mybloggie:2.1.3_beta:*:*:*:*:*:*:*
Matching versions