Lucene search
HistoryMay 24, 2007 - 7:30 p.m.
CVE-2007-2858
cve-2007-2858
sql injection
ip-tracking mod
phpbb 2.0.x
nvd
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
8 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
52.2%
SQL injection vulnerability in the IP-Search functionality in the IP-Tracking Mod for phpBB 2.0.x allows remote authenticated administrators to execute arbitrary SQL commands via the Search Query field.
Affected configurations
Node
phpbbip-trackingMatch2.0
ORphpbbip-trackingMatch2.0.1
ORphpbbip-trackingMatch2.0.2
ORphpbbip-trackingMatch2.0.3
ORphpbbip-trackingMatch2.0.4
ORphpbbip-trackingMatch2.0.5
ORphpbbip-trackingMatch2.0.6
ORphpbbip-trackingMatch2.0.7
ORphpbbip-trackingMatch2.0.8
ORphpbbip-trackingMatch2.0.9
Related
prion
prion
Sql injection
2007-05-24 19:30:00
cvelist
cvelist
CVE-2007-2858
2007-05-24 19:00:00
nvd
nvd
CVE-2007-2858
2007-05-24 19:30:00
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
8 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
52.2%
Related for CVE-2007-2858