Lucene search

K
cve[email protected]CVE-2007-1805
HistoryApr 02, 2007 - 11:19 p.m.

CVE-2007-1805

2007-04-0223:19:00
NVD-CWE-Other
web.nvd.nist.gov
22
cve-2007-1805
sql injection
debaser 0.92
xoops

8.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

73.4%

SQL injection vulnerability in genre.php in the debaser 0.92 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the genreid parameter.

CPENameOperatorVersion
myxoops:debasermyxoops debaserle0.92

8.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

73.4%

Related for CVE-2007-1805