Lucene search
HistoryMay 10, 2005 - 4:00 a.m.
CVE-2004-1836
cve-2004-1836
sql injection
invision power
top site list
vulnerability
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.6 High
AI Score
Confidence
Low
0.017 Low
EPSS
Percentile
87.9%
SQL injection vulnerability in index.php in Invision Power Top Site List 1.1 RC 2 and earlier allows remote attackers to execute arbitrary SQL via the id parameter of the comments action.
Affected configurations
Node
invision_power_servicesinvision_power_top_site_listMatch1.0
ORinvision_power_servicesinvision_power_top_site_listMatch1.1
ORinvision_power_servicesinvision_power_top_site_listMatch1.1_rc2
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.6 High
AI Score
Confidence
Low
0.017 Low
EPSS
Percentile
87.9%
Related for CVE-2004-1836