Lucene search

K
cve[email protected]CVE-2005-2987
HistorySep 20, 2005 - 12:03 a.m.

CVE-2005-2987

2005-09-2000:03:00
web.nvd.nist.gov
24
cve-2005-2987
sql injection
digital scribe 1.4
login.php
remote attackers
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.4 High

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.4%

SQL injection vulnerability in login.php in Digital Scribe 1.4 allows remote attackers to execute arbitrary SQL commands via the username parameter.

Affected configurations

NVD
Node
digital_scribedigital_scribeMatch1.4

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.4 High

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.4%

Related for CVE-2005-2987