Lucene search
HistoryJan 23, 2008 - 10:00 p.m.
CVE-2008-0429
cve-2008-0429
sql injection
alstrasoft forum
pay per post exchange 2.0
security vulnerability
remote attack
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.3 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
69.8%
SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a forum_catview action.
Affected configurations
Node
alstrasoftforum_pay_per_post_exchangeMatch2.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| alstrasoft:forum_pay_per_post_exchange | alstrasoft forum pay per post exchange | eq | 2.0 |
Related
prion
prion
Sql injection
2008-01-23 22:00:00
cvelist
cvelist
CVE-2008-0429
2008-01-23 21:00:00
nvd
nvd
CVE-2008-0429
2008-01-23 22:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.3 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
69.8%
Related for CVE-2008-0429