Lucene search
HistoryOct 01, 2007 - 5:17 a.m.
CVE-2007-5151
cve-2007-5151
sql injection
nukesentinel
vulnerability
remote attackers
arbitrary sql commands
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.4 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
75.6%
SQL injection vulnerability in the abget_admin function in includes/nukesentinel.php in NukeSentinel 2.5.12 allows remote attackers to execute arbitrary SQL commands via base64-encoded data in an admin cookie.
Affected configurations
Node
nukescriptsnukesentinelMatch2.5.12
| CPE | Name | Operator | Version |
|---|---|---|---|
| nukescripts:nukesentinel | nukescripts nukesentinel | eq | 2.5.12 |
Related
nvd
nvd
CVE-2007-5151
2007-10-01 05:17:00
prion
prion
Sql injection
2007-10-01 05:17:00
cvelist
cvelist
CVE-2007-5151
2007-10-01 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.4 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
75.6%
Related for CVE-2007-5151