Lucene search
HistoryOct 16, 2007 - 11:17 p.m.
CVE-2007-5485
cve-2007-5485
sql injection
index.php
mg2 1.0
kwsphp
8.4 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
60.6%
SQL injection vulnerability in index.php in the mg2 1.0 module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the album parameter.
Affected configurations
Node
kwsphpkwsphpMatch1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| kwsphp:kwsphp | kwsphp | eq | 1.0 |
Related
nvd
nvd
CVE-2007-5485
2007-10-16 23:17:00
prion
prion
Sql injection
2007-10-16 23:17:00
cvelist
cvelist
CVE-2007-5485
2007-10-16 23:00:00
8.4 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
60.6%
Related for CVE-2007-5485