Lucene search
MitreCVE-2002-0581HistoryJun 18, 2002 - 4:00 a.m.
CVE-2002-0581
2002-06-1804:00:00
mitre
web.nvd.nist.gov
27
workforceroi
xpede
4.1
sql injection
remote attack
nvd
cve-2002-0581
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.5
Confidence
Low
EPSS
0.008
Percentile
81.1%
WorkforceROI Xpede 4.1 allows remote attackers to execute arbitrary SQL commands and read, modify, or steal credentials from the database via the Qry parameter in the sprc.asp script.
Affected configurations
Node
workforceroixpedeMatch4.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| workforceroi | xpede | 4.1 | cpe:2.3:a:workforceroi:xpede:4.1:*:*:*:*:*:*:* |
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.5
Confidence
Low
EPSS
0.008
Percentile
81.1%
Related for CVE-2002-0581