Lucene search

K
cve[email protected]CVE-2007-3573
HistoryJul 05, 2007 - 8:30 p.m.

CVE-2007-3573

2007-07-0520:30:00
web.nvd.nist.gov
18
cve-2007-3573
sql injection
akocomment
remote code execution
nvd

8.4 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.015 Low

EPSS

Percentile

86.8%

Multiple SQL injection vulnerabilities in akocomment allow remote attackers to execute arbitrary SQL commands via the (1) acparentid or (2) acitemid parameter to an unspecified component, different vectors than CVE-2006-1421.

Affected configurations

NVD
Node
akocommentakocomment
CPENameOperatorVersion
akocomment:akocommentakocommenteq*

8.4 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.015 Low

EPSS

Percentile

86.8%

Related for CVE-2007-3573