Lucene search
HistoryMay 10, 2005 - 4:00 a.m.
CVE-2004-2067
sql injection
controlpanel.php
jaws framework
content management system
authentication bypass
cve-2004-2067
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.9 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
70.8%
SQL injection vulnerability in controlpanel.php in Jaws Framework and Content Management System 0.4 allows remote attackers to execute arbitrary SQL and bypass authentication via the (1) user, (2) password, or (3) crypted_password parameters.
Affected configurations
Node
jawsjawsMatch0.2
ORjawsjawsMatch0.3
ORjawsjawsMatch0.4
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.9 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
70.8%
Related for CVE-2004-2067