Lucene search
HistorySep 12, 2001 - 4:00 a.m.
CVE-1999-1260
cve-1999-1260
msql
mini sql
2.0.6
remote attack
sensitive information
serverstats
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.7 Medium
AI Score
Confidence
Low
0.009 Low
EPSS
Percentile
82.5%
mSQL (Mini SQL) 2.0.6 allows remote attackers to obtain sensitive server information such as logged users, database names, and server version via the ServerStats query.
Affected configurations
Node
hughesmsqlRange≤2.0.6
| CPE | Name | Operator | Version |
|---|---|---|---|
| hughes:msql | hughes msql | le | 2.0.6 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.7 Medium
AI Score
Confidence
Low
0.009 Low
EPSS
Percentile
82.5%
Related for CVE-1999-1260