AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2006-2718

MEDIUM · CVSS 6.5 EPSS 1.54%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2006-06-01 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2006-2718
Severity
MEDIUM
CVSS
6.5
EPSS
1.54%
Microsoft

Original NVD Description

JIWA Financials 6.4.14 passes a Microsoft SQL Server account's username and password, and the name of a data source, to a Crystal Reports .rpt file, which allows remote authenticated users to execute certain standard stored procedures by referencing them in a user-written .rpt file, as demonstrated by using a stored procedure that provides the username and cleartext password of every account.