Lucene search

[email protected]CVE-2001-1226

HistoryDec 25, 2001 - 5:00 a.m.

CVE-2001-1226

2001-12-2505:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

adcycle

sql injection

remote attack

unsanitized input

mysql

nvd

cve-2001-1226.

7.6 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

75.8%

JSON

AdCycle 1.17 and earlier allow remote attackers to modify SQL queries, which are not properly sanitized before being passed to the MySQL database.

CPENameOperatorVersion
adcycle:adcycleadcycleeq1.14
adcycle:adcycleadcycleeq1.12
adcycle:adcycleadcycleeq1.15
adcycle:adcycleadcycleeq1.13
adcycle:adcycleadcycleeq1.17
adcycle:adcycleadcycleeq1.16

CPE	Name	Operator	Version
adcycle:adcycle	adcycle	eq	1.14
adcycle:adcycle	adcycle	eq	1.12
adcycle:adcycle	adcycle	eq	1.15
adcycle:adcycle	adcycle	eq	1.13
adcycle:adcycle	adcycle	eq	1.17
adcycle:adcycle	adcycle	eq	1.16

References

www.iss.net/security_center/static/7762.php

www.securityfocus.com/archive/1/247126

www.securityfocus.com/bid/3741

7.6 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

75.8%

JSON

Related for CVE-2001-1226

cert1