« Volver al listado

CVE-2006-6422

Estado: ModificadaMedia (5)—

Agileco AgileBill 1.4.x and AgileVoice 1.4.x do not properly handle certain proxy requests, which allows remote attackers to disable the application by entering invalid license data on a form, possibly involving modules/core/license.inc.php. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Agileco — AgilebillAgileco — Agilevoice

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2006-6422",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2006-12-10T11:28:00.000",
  "references": [
    {
      "url": "http://secunia.com/advisories/23223",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/21459",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30751",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/23223",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/21459",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30751",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Agileco AgileBill 1.4.x and AgileVoice 1.4.x do not properly handle certain proxy requests, which allows remote attackers to disable the application by entering invalid license data on a form, possibly involving modules/core/license.inc.php.  NOTE: The provenance of this information is unknown; the details are obtained solely from third party information."
    },
    {
      "lang": "es",
      "value": "Agileco AgileBill 1.4.x y AgileVoice 1.4.x no maneja adecuadamente ciertas respuestas de proxy, lo cual permite a atacantes remotos inhabilitar la aplicación a través de la entrada de datos de licencias inválidas sobre un formulario, posiblemente afectando modules/core/license.inc.php. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos a partir de la información de terceros. \r\n"
    }
  ],
  "lastModified": "2026-06-16T22:33:06.087",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:agileco:agilebill:1.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E7CC4E79-2C60-4BF4-8CA5-44DD671EC819"
            },
            {
              "criteria": "cpe:2.3:a:agileco:agilebill:1.4.92:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B7C8FFF2-66F0-4C24-8BF9-F3527739E581"
            },
            {
              "criteria": "cpe:2.3:a:agileco:agilebill:1.4.93:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "059A82A7-AC7D-427B-8DF0-873878CDFD7E"
            },
            {
              "criteria": "cpe:2.3:a:agileco:agilevoice:1.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "07D89A34-A43E-41F6-B994-04B3C570B070"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}