Lucene search
HistoryJan 18, 2008 - 10:00 p.m.
CVE-2008-0355
cve-2008-0355
sql injection
phpecho cms
forum module
security vulnerability
8.2 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
58.4%
SQL injection vulnerability in index.php in the forum module in PHPEcho CMS, probably 2.0-rc3 and earlier, allows remote attackers to execute arbitrary SQL commands via the id parameter in a section action, a different vector than CVE-2007-2866.
Affected configurations
Node
phpecho_cmsphpecho_cmsRange≤2.0-rc3
| CPE | Name | Operator | Version |
|---|---|---|---|
| phpecho_cms:phpecho_cms | phpecho cms | le | 2.0-rc3 |
Related
cvelist
cvelist
nvd
nvd
prion
prion
cve
cve
CVE-2009-2402
2009-07-09 16:30:00
CVE-2007-2866
2007-05-25 18:30:00
8.2 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
58.4%
Related for CVE-2008-0355