Lucene search

K
cve[email protected]CVE-2007-4054
HistoryJul 30, 2007 - 5:30 p.m.

CVE-2007-4054

2007-07-3017:30:00
NVD-CWE-Other
web.nvd.nist.gov
35
cve-2007-4054
sql injection
vulnerability
category.php
php123 top sites
remote attackers
arbitrary sql commands

9.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.235 Low

EPSS

Percentile

96.5%

SQL injection vulnerability in category.php in PHP123 Top Sites allows remote attackers to execute arbitrary SQL commands via the cat parameter.

CPENameOperatorVersion
php123:top_sitesphp123 top siteseq*

9.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.235 Low

EPSS

Percentile

96.5%

Related for CVE-2007-4054