Lucene search
HistoryJul 30, 2007 - 5:30 p.m.
CVE-2007-4055
cve-2007-4055
sql injection
simpleblog 3.0
remote attackers
arbitrary commands
8.7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.189 Low
EPSS
Percentile
96.2%
SQL injection vulnerability in comments_get.asp in SimpleBlog 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this may be related to CVE-2006-4300.
| CPE | Name | Operator | Version |
|---|---|---|---|
| 8pixel.net:simple_blog | 8pixel.net simple blog | eq | 3.0 |
8.7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.189 Low
EPSS
Percentile
96.2%
Related for CVE-2007-4055