Lucene search

K
cveMitreCVE-2007-0266
HistoryJan 16, 2007 - 11:28 p.m.

CVE-2007-0266

2007-01-1623:28:00
mitre
web.nvd.nist.gov
24
cve-2007-0266
sql injection
vulnerability
ezboxx portal system
web script
html
nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

High

EPSS

0.011

Percentile

84.3%

SQL injection vulnerability in boxx/ShowAppendix.asp in Ezboxx Portal System Beta 0.7.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the iid parameter.

Affected configurations

Nvd
Node
ezboxxezboxx_portal_systemRangebeta_0.7.6
VendorProductVersionCPE
ezboxxezboxx_portal_system*cpe:2.3:a:ezboxx:ezboxx_portal_system:*:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

High

EPSS

0.011

Percentile

84.3%

Related for CVE-2007-0266