CVE-2006-3610
Last modified
CVE-2006-3610 is a vulnerability of currently unknown severity. index.php in Orbitcoders OrbitMATRIX 1.0 allows remote attackers to obtain sensitive information (partial database schema) via a modified page_name parameter, which reflects portions of an SQL query in the result. NOTE: it is not clear whether the information is target-specific. EPSS estimates a 1.18% chance of exploitation in the next 30 days.
Description
index.php in Orbitcoders OrbitMATRIX 1.0 allows remote attackers to obtain sensitive information (partial database schema) via a modified page_name parameter, which reflects portions of an SQL query in the result. NOTE: it is not clear whether the information is target-specific. If not, then this issue is not an exposure.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Orbitcoders | Orbitmatrix | 1.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-3610?
How severe is CVE-2006-3610?
How do I fix CVE-2006-3610?
Are you affected by CVE-2006-3610?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
