{"api_version":"1","generated_at":"2026-07-23T14:24:58+00:00","cve":"CVE-2006-2517","urls":{"html":"https://cve.report/CVE-2006-2517","api":"https://cve.report/api/cve/CVE-2006-2517.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-2517","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-2517"},"summary":{"title":"CVE-2006-2517","description":"SQL injection vulnerability in MyWeb Portal Office, Standard Edition, Public Edition, Medical Edition, Citizen Edition, School Edition, and Light Edition allows remote attackers to execute arbitrary SQL commands via unknown attack vectors.","state":"PUBLIC","assigner":"cve@mitre.org","published_at":"2006-05-22 22:02:00","updated_at":"2017-07-20 01:31:00"},"problem_types":["NVD-CWE-Other"],"metrics":[],"references":[{"url":"http://secunia.com/advisories/20178","name":"20178","refsource":"SECUNIA","tags":["Patch","Vendor Advisory"],"title":"Fujitsu MyWeb Products SQL Injection Vulnerability - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2006/1898","name":"ADV-2006-1898","refsource":"VUPEN","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1016133","name":"1016133","refsource":"SECTRACK","tags":[],"title":"Fujitsu MyWeb Product Line Input Validation Flaw Permits SQL Injection Attacks - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.myweb-jp.com/support/tech/tech_common_013.html","name":"http://www.myweb-jp.com/support/tech/tech_common_013.html","refsource":"MISC","tags":[],"title":"MyWeb サポート技術情報 : 富士通四国システムズ","mime":"text/xml","httpstatus":"401","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/26622","name":"myweb-sql-injection(26622)","refsource":"XF","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-2517","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-2517","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"2517","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fujitsu","cpe5":"myweb_portal_office","cpe6":"*","cpe7":"*","cpe8":"citizen","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"2517","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fujitsu","cpe5":"myweb_portal_office","cpe6":"*","cpe7":"*","cpe8":"light","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"2517","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fujitsu","cpe5":"myweb_portal_office","cpe6":"*","cpe7":"*","cpe8":"medical","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"2517","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fujitsu","cpe5":"myweb_portal_office","cpe6":"*","cpe7":"*","cpe8":"public","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"2517","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fujitsu","cpe5":"myweb_portal_office","cpe6":"*","cpe7":"*","cpe8":"school","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"2517","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fujitsu","cpe5":"myweb_portal_office","cpe6":"*","cpe7":"*","cpe8":"standard","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"2517","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fujitsu","cpe5":"myweb_portal_office","cpe6":"*","cpe7":"*","cpe8":"citizen","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"2517","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fujitsu","cpe5":"myweb_portal_office","cpe6":"*","cpe7":"*","cpe8":"light","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"2517","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fujitsu","cpe5":"myweb_portal_office","cpe6":"*","cpe7":"*","cpe8":"medical","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"2517","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fujitsu","cpe5":"myweb_portal_office","cpe6":"*","cpe7":"*","cpe8":"public","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"2517","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fujitsu","cpe5":"myweb_portal_office","cpe6":"*","cpe7":"*","cpe8":"school","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"2517","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fujitsu","cpe5":"myweb_portal_office","cpe6":"*","cpe7":"*","cpe8":"standard","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-2517","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"SQL injection vulnerability in MyWeb Portal Office, Standard Edition, Public Edition, Medical Edition, Citizen Edition, School Edition, and Light Edition allows remote attackers to execute arbitrary SQL commands via unknown attack vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"1016133","refsource":"SECTRACK","url":"http://securitytracker.com/id?1016133"},{"name":"ADV-2006-1898","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2006/1898"},{"name":"20178","refsource":"SECUNIA","url":"http://secunia.com/advisories/20178"},{"name":"http://www.myweb-jp.com/support/tech/tech_common_013.html","refsource":"MISC","url":"http://www.myweb-jp.com/support/tech/tech_common_013.html"},{"name":"myweb-sql-injection(26622)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/26622"}]}},"nvd":{"publishedDate":"2006-05-22 22:02:00","lastModifiedDate":"2017-07-20 01:31:00","problem_types":["NVD-CWE-Other"],"metrics":{"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"severity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:fujitsu:myweb_portal_office:*:*:school:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:fujitsu:myweb_portal_office:*:*:public:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:fujitsu:myweb_portal_office:*:*:standard:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:fujitsu:myweb_portal_office:*:*:medical:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:fujitsu:myweb_portal_office:*:*:light:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:fujitsu:myweb_portal_office:*:*:citizen:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"2517","Ordinal":"17829","Title":"CVE-2006-2517","CVE":"CVE-2006-2517","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"2517","Ordinal":"1","NoteData":"SQL injection vulnerability in MyWeb Portal Office, Standard Edition, Public Edition, Medical Edition, Citizen Edition, School Edition, and Light Edition allows remote attackers to execute arbitrary SQL commands via unknown attack vectors.","Type":"Description","Title":null},{"CveYear":"2006","CveId":"2517","Ordinal":"2","NoteData":"2006-05-22","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"2517","Ordinal":"3","NoteData":"2017-07-19","Type":"Other","Title":"Modified"}]}}}