Lucene search

K
cve[email protected]CVE-2007-2942
HistoryMay 31, 2007 - 12:30 a.m.

CVE-2007-2942

2007-05-3100:30:00
web.nvd.nist.gov
26
cve-2007-2942
sql injection
my little forum
security vulnerability
remote attack

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.3 High

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.7%

SQL injection vulnerability in user.php in My Little Forum 1.7 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected configurations

NVD
Node
my_little_homepagemy_little_forumRange1.7

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.3 High

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.7%

Related for CVE-2007-2942