Lucene search
HistoryAug 31, 2007 - 12:17 a.m.
CVE-2007-4603
cve
sql injection
acg news 1.0
remote attackers
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.5 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
71.7%
Multiple SQL injection vulnerabilities in index.php in ACG News 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the aid parameter in a showarticle action or (2) the catid parameter in a showcat action.
Affected configurations
Node
altercoderacg_newsMatch1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| altercoder:acg_news | altercoder acg news | eq | 1.0 |
Related
nvd
nvd
CVE-2007-4603
2007-08-31 00:17:00
prion
prion
Sql injection
2007-08-31 00:17:00
cvelist
cvelist
CVE-2007-4603
2007-08-31 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.5 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
71.7%
Related for CVE-2007-4603