Lucene search
HistoryJun 27, 2007 - 12:30 a.m.
CVE-2007-3452
cve-2007-3452
sql injection
edocstore
remote attack
vulnerability
9.3 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.139 Low
EPSS
Percentile
95.6%
SQL injection vulnerability in essentials/minutes/doc.php in eDocStore allows remote attackers to execute arbitrary SQL commands via the doc_id parameter in an inline action.
| CPE | Name | Operator | Version |
|---|---|---|---|
| edocstore:edocstore | edocstore | eq | * |
9.3 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.139 Low
EPSS
Percentile
95.6%
Related for CVE-2007-3452