Lucene search
HistoryMar 12, 2007 - 11:19 p.m.
CVE-2007-1417
sql injection
hc newssystem 1.0-4
remote attackers
arbitrary commands
8.7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.014 Low
EPSS
Percentile
86.1%
SQL injection vulnerability in index.php in HC NEWSSYSTEM 1.0-4 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a komm aktion.
| CPE | Name | Operator | Version |
|---|---|---|---|
| hc_design:newssystem | hc design newssystem | eq | 1.0 |
| hc_design:newssystem | hc design newssystem | eq | 1.4 |
8.7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.014 Low
EPSS
Percentile
86.1%
Related for CVE-2007-1417