Lucene search

K
cve[email protected]CVE-2003-0657
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2003-0657

2022-10-0316:15:46
web.nvd.nist.gov
24
infolog
phpgroupware
sql injection
vulnerability
unauthorized database actions

7.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

46.7%

Multiple SQL injection vulnerabilities in the infolog module for phpgroupware 0.9.14 and earlier could allow remote attackers to conduct unauthorized database actions.

Affected configurations

NVD
Node
phpgroupwarephpgroupwareRange0.9.14

7.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

46.7%