Lucene search
HistoryJul 29, 2004 - 4:00 a.m.
CVE-2004-2066
cve-2004-2066
sql injection
vulnerability
linpha
remote attackers
authentication
cookies
9.5 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
56.2%
SQL injection vulnerability in session.php in LinPHA 0.9.4 allows remote attackers to execute arbitrary SQL code and bypass authentication via the (1) linpha_userid or (2) linpha_password cookies.
| CPE | Name | Operator | Version |
|---|---|---|---|
| linpha:linpha | linpha | eq | 0.9.4 |
| linpha:linpha | linpha | eq | 0.9.3 |
| linpha:linpha | linpha | eq | 0.9.2 |
| linpha:linpha | linpha | eq | 0.9.1 |
| linpha:linpha | linpha | eq | 0.9.0 |
9.5 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
56.2%
Related for CVE-2004-2066