PT-2006-3464 · Myweb · Myweb Portal Public Edition+6

Published 2006-05-22 · Updated 2017-07-20 · CVE-2006-2517

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MyWeb Portal Office, Standard Edition, Public Edition, Medical Edition, Citizen Edition, School Edition, and Light Edition (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary SQL commands. This can be done via unknown attack vectors.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-2517

Affected Products

Myweb Portal Citizen Edition

Myweb Portal Light Edition

Myweb Portal Medical Edition

Myweb Portal Office

Myweb Portal Public Edition

Myweb Portal School Edition

Myweb Portal Standard Edition

References · 6

• http://secunia.com/advisories/20178 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-2517 · Security Note
• http://vupen.com/english/advisories/2006/1898 · Note
• http://securitytracker.com/id?1016133 · Note
• http://myweb-jp.com/support/tech/tech_common_013.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26622 · Note