Lucene search

[email protected]CVE-2008-0449

HistoryJan 25, 2008 - 12:00 a.m.

CVE-2008-0449

2008-01-2500:00:00

CWE-89

[email protected]

web.nvd.nist.gov

sql injection

vp-asp shopping cart

6.50

vulnerability

remote attackers

nvd

cve-2008-0449

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.8%

JSON

SQL injection vulnerability in paypalresult.asp in VP-ASP Shopping Cart 6.50 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

NVD

Node

rocksalt_internationalvp_aspMatch4.00

rocksalt_internationalvp_aspMatch4.50

rocksalt_internationalvp_aspMatch5.00

rocksalt_internationalvp_aspMatch5.50

rocksalt_internationalvp_aspMatch6.00

rocksalt_internationalvp_aspMatch6.50

CPENameOperatorVersion
rocksalt_international:vp_asprocksalt international vp aspeq4.00
rocksalt_international:vp_asprocksalt international vp aspeq4.50
rocksalt_international:vp_asprocksalt international vp aspeq5.00
rocksalt_international:vp_asprocksalt international vp aspeq5.50
rocksalt_international:vp_asprocksalt international vp aspeq6.00
rocksalt_international:vp_asprocksalt international vp aspeq6.50

CPE	Name	Operator	Version
rocksalt_international:vp_asp	rocksalt international vp asp	eq	4.00
rocksalt_international:vp_asp	rocksalt international vp asp	eq	4.50
rocksalt_international:vp_asp	rocksalt international vp asp	eq	5.00
rocksalt_international:vp_asp	rocksalt international vp asp	eq	5.50
rocksalt_international:vp_asp	rocksalt international vp asp	eq	6.00
rocksalt_international:vp_asp	rocksalt international vp asp	eq	6.50

References

www.securityfocus.com/bid/27347

exchange.xforce.ibmcloud.com/vulnerabilities/39811

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.8%

JSON

Related for CVE-2008-0449

prion1 cvelist1 nvd1