Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
CVE coverage

CVE-2006-6403

CVSS 5.0 10 detections found
View on NVD →
mystats.php in MyStats 1.0.8 and earlier allows remote attackers to obtain the installation path via (1) details and (2) by array parameters, probably resulting in a path disclosure in an error message.

Detection rules

Source Rule Status Updated
suricata ET WEB_SPECIFIC_APPS MyStats SQL Injection Attempt -- mystats.php details SELECT rev 10 2020-09-11
suricata ET WEB_SPECIFIC_APPS MyStats SQL Injection Attempt -- mystats.php details UNION SELECT rev 10 2020-09-11
suricata ET WEB_SPECIFIC_APPS MyStats SQL Injection Attempt -- mystats.php details INSERT rev 10 2020-09-11
suricata ET WEB_SPECIFIC_APPS MyStats SQL Injection Attempt -- mystats.php details DELETE rev 10 2020-09-11
suricata ET WEB_SPECIFIC_APPS MyStats SQL Injection Attempt -- mystats.php details UPDATE rev 10 2020-09-11
snort ET WEB_SPECIFIC_APPS MyStats SQL Injection Attempt -- mystats.php details SELECT rev 7 2010-12-27
snort ET WEB_SPECIFIC_APPS MyStats SQL Injection Attempt -- mystats.php details UNION SELECT rev 7 2010-12-27
snort ET WEB_SPECIFIC_APPS MyStats SQL Injection Attempt -- mystats.php details INSERT rev 7 2010-12-27
snort ET WEB_SPECIFIC_APPS MyStats SQL Injection Attempt -- mystats.php details DELETE rev 7 2010-12-27
snort ET WEB_SPECIFIC_APPS MyStats SQL Injection Attempt -- mystats.php details UPDATE rev 7 2010-12-27