Lucene search

K
cve[email protected]CVE-2007-5449
HistoryOct 14, 2007 - 6:17 p.m.

CVE-2007-5449

2007-10-1418:17:00
CWE-89
web.nvd.nist.gov
24
cve-2007-5449
sql injection
searchresult.php
softbiz recipes portal script
security vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.3 High

AI Score

Confidence

Low

0.066 Low

EPSS

Percentile

93.8%

SQL injection vulnerability in searchresult.php in Softbiz Recipes Portal Script allows remote attackers to execute arbitrary SQL commands via the sbcat_id parameter.

Affected configurations

NVD
Node
softbizrecipes_portal_script

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.3 High

AI Score

Confidence

Low

0.066 Low

EPSS

Percentile

93.8%

Related for CVE-2007-5449