Lucene search

K
cveMitreCVE-2007-3313
HistoryJun 21, 2007 - 6:30 p.m.

CVE-2007-3313

2007-06-2118:30:00
mitre
web.nvd.nist.gov
33
cve
sql injection
jasmine cms 1.0
security vulnerability
nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.5

Confidence

Low

EPSS

0.009

Percentile

83.1%

Multiple SQL injection vulnerabilities in Jasmine CMS 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the login_username parameter to login.php or (2) the item parameter to news.php.

Affected configurations

Nvd
Node
efstratios_geroulisjasmine_cmsMatch1.0
VendorProductVersionCPE
efstratios_geroulisjasmine_cms1.0cpe:2.3:a:efstratios_geroulis:jasmine_cms:1.0:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.5

Confidence

Low

EPSS

0.009

Percentile

83.1%

Related for CVE-2007-3313