Lucene search

K
cve[email protected]CVE-2005-2028
HistoryJun 21, 2005 - 4:00 a.m.

CVE-2005-2028

2005-06-2104:00:00
web.nvd.nist.gov
25
cve-2005-2028
sql injection
mercuryboard 1.1.4
nvd
security vulnerability

8.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

64.8%

SQL injection vulnerability in index.php for MercuryBoard 1.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header.

Affected configurations

NVD
Node
mercuryboardmercuryboard_message_boardMatch1.1.4

8.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

64.8%

Related for CVE-2005-2028