Lucene search
HistoryDec 14, 2005 - 11:03 a.m.
CVE-2005-4244
cve-2005-4244
sql injection
snipe gallery 3.1.4
security vulnerability
remote code execution
8.8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
56.8%
SQL injection vulnerability in Snipe Gallery 3.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) gallery_id parameter to view.php and (2) image_id parameter to image.php.
Affected configurations
Node
snipegallerysnipe_galleryRange≤3.1.4
| CPE | Name | Operator | Version |
|---|---|---|---|
| snipegallery:snipe_gallery | snipegallery snipe gallery | le | 3.1.4 |
8.8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
56.8%
Related for CVE-2005-4244