Lucene search

K
cveMitreCVE-2008-0601
HistoryFeb 06, 2008 - 12:00 p.m.

CVE-2008-0601

2008-02-0612:00:00
CWE-89
mitre
web.nvd.nist.gov
21
cve-2008-0601
sql injection
all club cms
accms
remote attackers
arbitrary sql commands

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.4

Confidence

Low

EPSS

0.003

Percentile

68.8%

SQL injection vulnerability in index.php in All Club CMS (ACCMS) 0.0.1f and earlier allows remote attackers to execute arbitrary SQL commands via the name parameter.

Affected configurations

Nvd
Node
all_club_cmsall_club_cmsRange0.0.1f
VendorProductVersionCPE
all_club_cmsall_club_cms*cpe:2.3:a:all_club_cms:all_club_cms:*:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.4

Confidence

Low

EPSS

0.003

Percentile

68.8%

Related for CVE-2008-0601