Lucene search

K
cve[email protected]CVE-2008-0911
HistoryFeb 22, 2008 - 11:44 p.m.

CVE-2008-0911

2008-02-2223:44:00
CWE-89
web.nvd.nist.gov
19
sql injection
vulnerability
productdetails.php
iscripts multicart 2.0
nvd

7.9 High

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

28.7%

SQL injection vulnerability in productdetails.php in iScripts MultiCart 2.0 allows remote authenticated users to execute arbitrary SQL commands via the productid parameter.

Affected configurations

NVD
Node
iscriptsmulticartMatch2.0

7.9 High

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

28.7%

Related for CVE-2008-0911