Lucene search

[email protected]CVE-2002-2168

HistoryDec 31, 2002 - 5:00 a.m.

CVE-2002-2168

2002-12-3105:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

security

sql injection

thorsten korner 123tkshop

vulnerability

nvd

9.2 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

57.3%

JSON

SQL injection vulnerability in Thorsten Korner 123tkShop before 0.3.1 allows remote attackers to execute arbitrary SQL queries via various programs including function_describe_item1.inc.php.

CPENameOperatorVersion
thorsten_korner:123tkshopthorsten korner 123tkshopeq0.2
thorsten_korner:123tkshopthorsten korner 123tkshopeq0.3

CPE	Name	Operator	Version
thorsten_korner:123tkshop	thorsten korner 123tkshop	eq	0.2
thorsten_korner:123tkshop	thorsten korner 123tkshop	eq	0.3

References

online.securityfocus.com/archive/1/282404

www.123tkshop.org/index.php

www.iss.net/security_center/static/9582.php

www.securityfocus.com/bid/5244

9.2 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

57.3%

JSON

Related for CVE-2002-2168

cvelist1