Lucene search
HistoryMay 10, 2005 - 4:00 a.m.
CVE-2004-1961
cve-2004-1961
sql injection
protector system
remote attackers
8.5 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
56.9%
blocker.php in Protector System 1.15b1 allows remote attackers to bypass SQL injection protection and execute limited SQL commands via URL-encoded “'” characters (“%27”).
Affected configurations
Node
protector_systemprotector_systemMatch1.15b1
| CPE | Name | Operator | Version |
|---|---|---|---|
| protector_system:protector_system | protector system | eq | 1.15b1 |
8.5 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
56.9%
Related for CVE-2004-1961