Lucene search

[email protected]CVE-2004-2567

HistoryNov 22, 2005 - 2:00 a.m.

CVE-2004-2567

2005-11-2202:00:00

[email protected]

web.nvd.nist.gov

cve-2004-2567

sql injection

recipants

security vulnerability

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.9 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.0%

JSON

Multiple SQL injection vulnerabilities in ReciPants 1.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) user id, (2) recipe id, (3) category id, and (4) other ID number fields.

Affected configurations

NVD

Node

recipantsrecipantsMatch1.0

recipantsrecipantsMatch1.0.1

recipantsrecipantsMatch1.1

recipantsrecipantsMatch1.1.1

CPENameOperatorVersion
recipants:recipantsrecipantseq1.0
recipants:recipantsrecipantseq1.0.1
recipants:recipantsrecipantseq1.1
recipants:recipantsrecipantseq1.1.1

CPE	Name	Operator	Version
recipants:recipants	recipants	eq	1.0
recipants:recipants	recipants	eq	1.0.1
recipants:recipants	recipants	eq	1.1
recipants:recipants	recipants	eq	1.1.1

References

secunia.com/advisories/11533

securitytracker.com/id?1009984

sourceforge.net/project/shownotes.php?group_id=90737&release_id=234415

www.securityfocus.com/bid/10250

exchange.xforce.ibmcloud.com/vulnerabilities/16024

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.9 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.0%

JSON

Related for CVE-2004-2567

nvd1 cvelist1