Lucene search
HistoryDec 07, 2007 - 11:46 a.m.
CVE-2007-6269
nvd
cve-2007-6269
sql injection
absolute news manager.net 5.1
remote attackers
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.5 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
69.7%
Multiple SQL injection vulnerabilities in xlaabsolutenm.aspx in Absolute News Manager.NET 5.1 allow remote attackers to execute arbitrary SQL commands via the (1) z, (2) pz, (3) ord, and (4) sort parameters.
Affected configurations
Node
xiglaabsolute_news_manager.netMatch5.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| xigla:absolute_news_manager.net | xigla absolute news manager.net | eq | 5.1 |
References
Related
cvelist
cvelist
CVE-2007-6269
2007-12-07 11:00:00
nvd
nvd
CVE-2007-6269
2007-12-07 11:46:00
prion
prion
Sql injection
2007-12-07 11:46:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.5 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
69.7%
Related for CVE-2007-6269