Lucene search
HistoryMay 09, 2007 - 6:19 p.m.
CVE-2007-2556
cve-2007-2556
sql injection
nuked-klan 1.7.6
x-forwarded-for
remote code execution
8.7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.03 Low
EPSS
Percentile
90.9%
SQL injection vulnerability in Nuked-klaN 1.7.6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For (X_FORWARDED_FOR) HTTP header, as demonstrated by a request to the /nk/ URI.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nuked-klan:nuked-klan | nuked-klan | eq | 1.7.6 |
Related
cvelist
cvelist
CVE-2007-2556
2007-05-09 18:00:00
dsquare
dsquare
Nuked-klaN 1.7.7 / SP4.4 SQL injection
2014-01-22 00:00:00
prion
prion
Sql injection
2007-05-09 18:19:00
8.7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.03 Low
EPSS
Percentile
90.9%
Related for CVE-2007-2556