Lucene search
HistoryFeb 15, 2008 - 10:00 p.m.
CVE-2008-0795
cve-2008-0795
sql injection
mgfi xfaq
mambo
joomla
9.4 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
27.6%
SQL injection vulnerability in index.php in the MGFi XfaQ (com_xfaq) 1.2 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in an answer action.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mgfi:xfaq | mgfi xfaq | eq | 1.2 |
| joomla:joomla | joomla | eq | 1.0 |
| mambo:mambo | mambo | eq | 4.5 |
9.4 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
27.6%
Related for CVE-2008-0795