CVE-2008-0301

2008-03-1123:44:00

CWE-89

mitre

web.nvd.nist.gov

cve

sql injection

mapbender 2.4.4

vulnerability

remote execution

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.3

Confidence

Low

EPSS

0.004

Percentile

73.4%

JSON

Multiple SQL injection vulnerabilities in Mapbender 2.4.4 allow remote attackers to execute arbitrary SQL commands via the gaz parameter to mod_gazetteer_edit.php and other unspecified vectors.

Affected configurations

Nvd

Node

mapbendermapbenderMatch2.4

mapbendermapbenderMatch2.4.1

mapbendermapbenderMatch2.4.2

mapbendermapbenderMatch2.4.3

mapbendermapbenderMatch2.4.4

VendorProductVersionCPE
mapbendermapbender2.4cpe:2.3:a:mapbender:mapbender:2.4:*:*:*:*:*:*:*
mapbendermapbender2.4.1cpe:2.3:a:mapbender:mapbender:2.4.1:*:*:*:*:*:*:*
mapbendermapbender2.4.2cpe:2.3:a:mapbender:mapbender:2.4.2:*:*:*:*:*:*:*
mapbendermapbender2.4.3cpe:2.3:a:mapbender:mapbender:2.4.3:*:*:*:*:*:*:*
mapbendermapbender2.4.4cpe:2.3:a:mapbender:mapbender:2.4.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mapbender	mapbender	2.4	cpe:2.3:a:mapbender:mapbender:2.4:::::::*
mapbender	mapbender	2.4.1	cpe:2.3:a:mapbender:mapbender:2.4.1:::::::*
mapbender	mapbender	2.4.2	cpe:2.3:a:mapbender:mapbender:2.4.2:::::::*
mapbender	mapbender	2.4.3	cpe:2.3:a:mapbender:mapbender:2.4.3:::::::*
mapbender	mapbender	2.4.4	cpe:2.3:a:mapbender:mapbender:2.4.4:::::::*