Lucene search
HistoryMay 08, 2004 - 4:00 a.m.
CVE-2004-2008
cve
sql injection
nukejokes
security vulnerability
remote code execution
9.2 High
AI Score
Confidence
Low
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
65.0%
SQL injection vulnerability in modules.php in NukeJokes 1.7 and 2 Beta allows remote attackers to execute arbitrary SQL via the jokeid parameter.
| CPE | Name | Operator | Version |
|---|---|---|---|
| adam_webb:nukejokes | adam webb nukejokes | eq | 2.0_beta |
| adam_webb:nukejokes | adam webb nukejokes | eq | 1.7 |
9.2 High
AI Score
Confidence
Low
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
65.0%
Related for CVE-2004-2008