Lucene search

K
cve[email protected]CVE-2004-2542
HistoryNov 20, 2005 - 9:00 p.m.

CVE-2004-2542

2005-11-2021:00:00
web.nvd.nist.gov
20
cve-2004-2542
sql injection
dynix webpac
remote attackers
stored procedures
login authentication
denial of service

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.9 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.8%

Multiple SQL injection vulnerabilities in Dynix (formerly known as epixtech) WebPAC allow remote attackers to execute arbitrary SQL commands via unknown attack vectors, resulting in an ability to execute stored procedures, bypass login authentication, and cause an unspecified denial of service to backend databases.

Affected configurations

NVD
Node
dynixwebpac
CPENameOperatorVersion
dynix:webpacdynix webpaceq*

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.9 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.8%

Related for CVE-2004-2542