Lucene search
HistoryMar 02, 2007 - 9:18 p.m.
CVE-2007-1172
cve-2007-1172
sql injection
nukesentinel
file disclosure exploit
nvd
security vulnerability
8.6 High
AI Score
Confidence
Low
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.008 Low
EPSS
Percentile
81.4%
SQL injection vulnerability in nukesentinel.php in NukeSentinel 2.5.05, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header, aka the “File Disclosure Exploit.”
| CPE | Name | Operator | Version |
|---|---|---|---|
| nukescripts:nukesentinel | nukescripts nukesentinel | eq | 2.5.05 |
Related
prion
prion
Sql injection
2007-03-02 21:18:00
Sql injection
2007-03-16 22:19:00
cve
cve
CVE-2007-1493
2007-03-16 22:19:00
securityvulns
securityvulns
8.6 High
AI Score
Confidence
Low
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.008 Low
EPSS
Percentile
81.4%
Related for CVE-2007-1172